CVE-2019-11921

—

CVSS 3.0

9.8 critical

EPSS

2%p80

Published

Jul 25, 2019 (Jul 25, 2019)

Modified

Jun 17, 2026

Description

An out of bounds write is possible via a specially crafted packet in certain configurations of Proxygen due to improper handling of Base64 when parsing malformed binary content in Structured HTTP Headers. This issue affects versions of proxygen prior to v2019.07.22.00.

Vendors: facebook
Products: proxygen
Weakness: CWE-787
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.1%)

In the news0 stories

No ingested article mentions this CVE yet.