Skip to content
OpenAdvisories
Unscored CVE-2020-1897 EUVD-2020-12723GHSA-838g-g793-hh7g

A use-after-free is possible due to an error in lifetime management in the request adaptor when a malicious client invokes request error ha…

Published May 18, 2020 · Updated Aug 4, 2024 · Assigned by facebook

Vendor: Facebook Product: proxygen

Description

A use-after-free is possible due to an error in lifetime management in the request adaptor when a malicious client invokes request error handling in a specific sequence. This issue affects versions of proxygen prior to v2020.05.18.00.

Affected products

VendorProductAffectedFixed
Facebook proxygen unspecified – < v2020.05.18.00 v2020.05.18.00

References