frida-ssl-bypass

🔓 Frida SSL Pinning Bypass Android向けユニバーサルSSL/TLS証明書ピンニングバイパス 作者: Danieldev GitHub: @danieldev23 | Telegram: @zadevz あらゆるAndroidアプリ のSSLピンニングを無効化する包括的なFridaツールキット — Javaレイヤーとネイティブレイヤーの両方をカバーし、標準的なOkHttpピンニングからFacebook独自のproxygenネイティブ実装まで対応します。 ✨ 機能 機能| ステータス ---|--- Java TrustManager / SSLContext...

CVE-2026-91095

A flaw was found in proxygen. A remote attacker could cause a Denial of Service DoS or potentially execute arbitrary code by exploiting a use-after-free vulnerability. During WebTransport stream processing, internal handlers can return stream references that have already been deallocated and...

CVE-2026-91096

A flaw was found in proxygen. The WebTransport implementation fails to unregister read callbacks for closed streams before destroying them. This issue results in a use-after-free condition, where the transport attempts to invoke memory that has already been released. A remote attacker can exploit...

CVE-2026-84895

A flaw was found in proxygen. During session closure, member data continues to be accessed after calling the base termination method, which may notify the session handler and destroy the session object. A remote attacker can exploit this use-after-free condition to cause a Denial of Service DoS...

CVE-2026-84895

In proxygen from v2026.04.06.00 until v2026.09.28.00, QuicWtSession::closeSession accesses its member fields after calling the base QuicWtSessionBase::closeSession method. The base method notifies the session handler, which may release the last reference to the session and destroy it...

CVE-2026-91095

In proxygen from v2024.10.28.00 until v2026.09.28.00, the HTTPTransaction::onWebTransportUniStream and HTTPTransaction::onWebTransportBidiStream APIs could return stream handles that the stream handler had already freed. HQSession then installed those handles as transport read callbacks, which...

CVE-2026-91095

In proxygen from v2024.10.28.00 until v2026.09.28.00, the HTTPTransaction::onWebTransportUniStream and HTTPTransaction::onWebTransportBidiStream APIs could return stream handles that the stream handler had already freed. HQSession then installed those handles as transport read callbacks, which...

CVE-2026-91096

In proxygen from v2024.10.28.00 until v2026.09.28.00, WebTransportImpl::terminateSessionStreams WebTransportImpl::destroy in releases before v2025.08.18.00 failed to unregister read callbacks for streams that were no longer open before destroying them. The transport could then invoke a read...

CVE-2026-84895

In proxygen from v2026.04.06.00 until v2026.09.28.00, QuicWtSession::closeSession accesses its member fields after calling the base QuicWtSessionBase::closeSession method. The base method notifies the session handler, which may release the last reference to the session and destroy it...

CVE-2026-91096

In proxygen from v2024.10.28.00 until v2026.09.28.00, WebTransportImpl::terminateSessionStreams WebTransportImpl::destroy in releases before v2025.08.18.00 failed to unregister read callbacks for streams that were no longer open before destroying them. The transport could then invoke a read...

EUVD-2026-88545

In proxygen from v2024.10.28.00 until v2026.09.28.00, WebTransportImpl::terminateSessionStreams WebTransportImpl::destroy in releases before v2025.08.18.00 failed to unregister read callbacks for streams that were no longer open before destroying them. The transport could then invoke a read...

CVE-2026-91096

A flaw in proxygen (versions v2024.10.28.00 until v2026.09.28.00) allows a use-after-free condition. The WebTransportImpl::terminateSessionStreams function (or WebTransportImpl::destroy in releases before v2025.08.18.00) fails to unregister read callbacks for closed streams before destroying them...

CVE-2026-91096

In proxygen from v2024.10.28.00 until v2026.09.28.00, WebTransportImpl::terminateSessionStreams WebTransportImpl::destroy in releases before v2025.08.18.00 failed to unregister read callbacks for streams that were no longer open before destroying them. The transport could then invoke a read...

CVE-2026-91096

In proxygen from v2024.10.28.00 until v2026.09.28.00, WebTransportImpl::terminateSessionStreams WebTransportImpl::destroy in releases before v2025.08.18.00 failed to unregister read callbacks for streams that were no longer open before destroying them. The transport could then invoke a read...

CVE-2026-91095

In proxygen from v2024.10.28.00 until v2026.09.28.00, the HTTPTransaction::onWebTransportUniStream and HTTPTransaction::onWebTransportBidiStream APIs could return stream handles that the stream handler had already freed. HQSession then installed those handles as transport read callbacks, which...

CVE-2026-91095

A use-after-free vulnerability exists in proxygen versions v2024.10.28.00 through v2026.09.28.00 . The flaw occurs because the HTTPTransaction::onWebTransportUniStream and HTTPTransaction::onWebTransportBidiStream APIs may return stream handles that have already been deallocated by the stream han...

EUVD-2026-88544

In proxygen from v2024.10.28.00 until v2026.09.28.00, the HTTPTransaction::onWebTransportUniStream and HTTPTransaction::onWebTransportBidiStream APIs could return stream handles that the stream handler had already freed. HQSession then installed those handles as transport read callbacks, which...

CVE-2026-91095

In proxygen from v2024.10.28.00 until v2026.09.28.00, the HTTPTransaction::onWebTransportUniStream and HTTPTransaction::onWebTransportBidiStream APIs could return stream handles that the stream handler had already freed. HQSession then installed those handles as transport read callbacks, which...

CVE-2026-84895

In proxygen from v2026.04.06.00 until v2026.09.28.00, QuicWtSession::closeSession accesses its member fields after calling the base QuicWtSessionBase::closeSession method. The base method notifies the session handler, which may release the last reference to the session and destroy it...

EUVD-2026-88543

In proxygen from v2026.04.06.00 until v2026.09.28.00, QuicWtSession::closeSession accesses its member fields after calling the base QuicWtSessionBase::closeSession method. The base method notifies the session handler, which may release the last reference to the session and destroy it...