Facebook Thrift at a glance
- Last 12 months
- 0
- Critical · all time
- 0
- Exploited · all time
- 0
- Public exploit · all time
- 0
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 0 | 0 |
| Oct 2026 | 0 | 0 |
| Sep 2026 | 0 | 0 |
| Aug 2026 | 0 | 0 |
| Jul 2026 | 0 | 0 |
| Jun 2026 | 0 | 0 |
| May 2026 | 0 | 0 |
| Apr 2026 | 0 | 0 |
| Mar 2026 | 0 | 0 |
| Feb 2026 | 0 | 0 |
| Jan 2026 | 0 | 0 |
| Dec 2025 | 0 | 0 |
| Nov 2025 | 0 | 0 |
| Oct 2025 | 0 | 0 |
| Sep 2025 | 0 | 0 |
| Aug 2025 | 0 | 0 |
| Jul 2025 | 0 | 0 |
| Jun 2025 | 0 | 0 |
| May 2025 | 0 | 0 |
| Apr 2025 | 0 | 0 |
| Mar 2025 | 0 | 0 |
| Feb 2025 | 0 | 0 |
| Jan 2025 | 0 | 0 |
| Dec 2024 | 0 | 0 |
11 results · Feed
-
Medium 5.3
A null-dereference vulnerability involving parsing requests specifying invalid protocols can cause the application to c…
-
High 7.5
A use-after-free vulnerability involving upgradeToRocket requests can cause the application to crash or potentially res…
-
Unscored —
An invalid free in Thrift's table-based serialization can cause the application to crash or potentially result in code …
-
High 7.5
Golang Facebook Thrift servers vulnerable to denial of service
Golang Facebook Thrift servers would not error upon receiving messages declaring containers of sizes larger than the payload. As a result, malicious clients could send short messages which would result in a large memory allocation, potentially leading to deni…
-
Unscored —
C++ Facebook Thrift servers would not error upon receiving messages declaring containers of sizes larger than the paylo…
-
Unscored —
Java Facebook Thrift servers would not error upon receiving messages declaring containers of sizes larger than the payl…
-
Unscored —
Python Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type. As a …
-
Unscored —
C++ Facebook Thrift servers (using cpp2) would not error upon receiving messages with containers of fields of unknown t…
-
Unscored —
Legacy C++ Facebook Thrift servers (using cpp instead of cpp2) would not error upon receiving messages with containers …
-
Unscored —
Java Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type. As a re…
-
High 7.5
Improper Input Validation and Excessive Iteration in Go Facebook Thrift
Go Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type. As a result, malicious clients could send short messages which would take a long time for the server to parse, potentially leading to denial of servi…