Unscored CVE-2021-24028 EUVD-2021-10948GHSA-qrr3-c36x-2pcc

An invalid free in Thrift's table-based serialization can cause the application to crash or potentially result in code execution or other u…

Published Apr 13, 2021 · Updated Aug 3, 2024 · Assigned by facebook

Vendor: Facebook Product: Facebook Thrift

Description

An invalid free in Thrift's table-based serialization can cause the application to crash or potentially result in code execution or other undesirable effects. This issue affects Facebook Thrift prior to v2021.02.22.00.

Affected products

Vendor	Product	Affected	Fixed
Facebook	Facebook Thrift	unspecified – < v2021.02.22.00	v2021.02.22.00

References

https://github.com/facebook/fbthrift/commit/bfda1efa547dce11a38592820916db01b05b9339
https://www.facebook.com/security/advisories/cve-2021-24028