Description (CNA)
An out of bounds write is possible via a specially crafted packet in certain configurations of Proxygen due to improper handling of Base64 when parsing malformed binary content in Structured HTTP Headers. This issue affects versions of proxygen prior to v2019.07.22.00.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Facebook / Proxygen | affected v2019.07.22.00; affected unspecified before v2019.07.22.00 |
CWE
No CWE identifiers supplied.
References
- https://github.com/facebook/proxygen/commit/2f07985bef9fbae124cc63e5c0272e32da4fdaec
- https://www.facebook.com/security/advisories/cve-2019-11921
ADP enrichment
No English description supplied.