Buck

buck

Vendor: Facebook • 1 CVE

CVEs (1)

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2018-6331

1Facebook

1Buck

Jun 17, 2026

Dec 31, 2018

N/A· v4

9.8 CRITICAL· v3

7.5 HIGH· v2

Buck parser-cache command loads/saves state using Java serialized object. If the state information is maliciously crafted, deserializing it could lead to code execution. This issue affects Buck versions prior to v2018.06...Show more