Unscored CVE-2019-11921 EUVD-2019-3579GHSA-87xc-5jfw-gv68

An out of bounds write is possible via a specially crafted packet in certain configurations of Proxygen due to improper handling of Base64 …

Published Jul 25, 2019 · Updated Aug 4, 2024 · Assigned by facebook

Description

An out of bounds write is possible via a specially crafted packet in certain configurations of Proxygen due to improper handling of Base64 when parsing malformed binary content in Structured HTTP Headers. This issue affects versions of proxygen prior to v2019.07.22.00.

Affected products

Vendor	Product	Affected	Fixed
Facebook	Proxygen	v2019.07.22.00, unspecified – < v2019.07.22.00	v2019.07.22.00

References

https://github.com/facebook/proxygen/commit/2f07985bef9fbae124cc63e5c0272e32da4fdaec
https://www.facebook.com/security/advisories/cve-2019-11921