Design/Logic Flaw

2020-05-1822:15:00

PRIOn knowledge base

www.prio-n.com

9.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.7%

JSON

A use-after-free is possible due to an error in lifetime management in the request adaptor when a malicious client invokes request error handling in a specific sequence. This issue affects versions of proxygen prior to v2020.05.18.00.

CPENameOperatorVersion
proxygenlt2020.05.18.00

CPE	Name	Operator	Version
	proxygen	lt	2020.05.18.00

References

www.facebook.com/security/advisories/cve-2020-1897