CVE-2019-11940

Published: Dec 4, 2019Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

In the course of decompressing HPACK inside the HTTP2 protocol, an unexpected sequence of header table resize operations can place the header table into a corrupted state, leading to a use-after-free condition and undefined behavior. This issue affects Proxygen from v0.29.0 until v2017.04.03.00.

Affected (1)

Products: Facebook: Proxygen

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Facebook Proxygen	From 0.29.0 to 2017.04.03.00

Related CWEs

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

References (4)

https://github.com/facebook/proxygen/commit/f43b134cc5c19d8532e7fb670a1c02e85f7a8d4f

Source: cve-assign@fb.com

PatchThird Party Advisory

https://www.facebook.com/security/advisories/cve-2019-11940

Source: cve-assign@fb.com

Third Party Advisory

https://github.com/facebook/proxygen/commit/f43b134cc5c19d8532e7fb670a1c02e85f7a8d4f

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

https://www.facebook.com/security/advisories/cve-2019-11940

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.