CVE-2020-1897

A use-after-free is possible due to an error in lifetime management in the request adaptor when a malicious client invokes request error handling in a specific sequence. This issue affects versions of proxygen prior to v2020.05.18.00.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve-assign@fb.com

Published

2020-05-18

Last modified

2024-08-04

Weaknesses

CWE-416

Affected products

• Proxygen (Facebook)

References

• https://www.facebook.com/security/advisories/cve-2020-1897