Skip to content
OpenAdvisories
Unscored CVE-2019-11940 EUVD-2019-3596GHSA-qp47-5phq-m7xm

In the course of decompressing HPACK inside the HTTP2 protocol, an unexpected sequence of header table resize operations can place the head…

Published Dec 4, 2019 · Updated Aug 4, 2024 · Assigned by facebook

Description

In the course of decompressing HPACK inside the HTTP2 protocol, an unexpected sequence of header table resize operations can place the header table into a corrupted state, leading to a use-after-free condition and undefined behavior. This issue affects Proxygen from v0.29.0 until v2017.04.03.00.

Affected products

VendorProductAffectedFixed
Facebook Proxygen v2017.04.03.00, v0.29.0 – < unspecified unspecified

References