Unscored CVE-2021-24030 EUVD-2021-10950GHSA-rq4p-fxq5-65xc

The fbgames protocol handler registered as part of Facebook Gameroom does not properly quote arguments passed to the executable. That allow…

Published Mar 10, 2021 · Updated Aug 3, 2024 · Assigned by facebook

Vendor: Facebook Product: Facebook Gameroom

Description

The fbgames protocol handler registered as part of Facebook Gameroom does not properly quote arguments passed to the executable. That allows a malicious URL to cause code execution. This issue affects versions prior to v1.26.0.

Affected products

Vendor	Product	Affected	Fixed
Facebook	Facebook Gameroom	unspecified – < 1.26.0	1.26.0

References

https://www.facebook.com/security/advisories/cve-2021-24030