Medium · 5.3 CVE-2024-45863 EUVD-2024-41632GHSA-2wr3-8g8v-wc39

A null-dereference vulnerability involving parsing requests specifying invalid protocols can cause the application to crash or potentially …

Published Sep 27, 2024 · Updated Sep 27, 2024 · Assigned by facebook

Vendor: Facebook Product: Facebook Thrift

Description

A null-dereference vulnerability involving parsing requests specifying invalid protocols can cause the application to crash or potentially result in other undesirable effects. This issue affects Facebook Thrift from v2024.09.09.00 until v2024.09.23.00.

Affected products

Vendor	Product	Affected	Fixed
Facebook	Facebook Thrift	v2024.09.09.00 – < v2024.09.23.00	v2024.09.23.00

References

https://www.facebook.com/security/advisories/cve-2024-45863