# cve.now: Facebook

The newest entries naming Facebook as an affected vendor (up to 200), of 147 in all, 3 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-91096](https://cve.now/CVE-2026-91096.md): In proxygen from v2024.10.28.00 until v2026.09.28.00, WebTransportImpl::terminateSessionStreams (WebTransportImpl::destroy in releases befor (CVSS 7.5)
- [CVE-2026-91095](https://cve.now/CVE-2026-91095.md): In proxygen from v2024.10.28.00 until v2026.09.28.00, the HTTPTransaction::onWebTransportUniStream and HTTPTransaction::onWebTransportBidiSt (CVSS 5.3)
- [CVE-2026-84895](https://cve.now/CVE-2026-84895.md): In proxygen from v2026.04.06.00 until v2026.09.28.00, QuicWtSession::closeSession accesses its member fields after calling the base QuicWtSe (CVSS 7.3)
- [CVE-2026-66707](https://cve.now/CVE-2026-66707.md): WordPress Facebook for WooCommerce plugin \<= 3.7.5 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2026-66705](https://cve.now/CVE-2026-66705.md): WordPress Facebook for WordPress plugin \<= 5.2.1 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2026-44909](https://cve.now/CVE-2026-44909.md): Proxygen lacked a generalized slow-consumer detection mechanism in its core HTTP session layer. (CVSS 7.5)
- [CVE-2026-49059](https://cve.now/CVE-2026-49059.md): WordPress Facebook for WooCommerce plugin \<= 3.7.0 - Open Redirection vulnerability (CVSS 4.7)
- [CVE-2026-23866](https://cve.now/CVE-2026-23866.md): Incomplete validation of AI rich response messages for Instagram Reels in WhatsApp for iOS v2.25.8.0 to v2.26.15.72 and WhatsApp for Android (CVSS 4.3)
- [CVE-2026-23863](https://cve.now/CVE-2026-23863.md): An attachment spoofing issue in WhatsApp for Windows prior to v2.3000.1032164386.258709 could have allowed maliciously formatted documents w (CVSS 6.5)
- [CVE-2025-55181](https://cve.now/CVE-2025-55181.md): Sending an HTTP request/response body with greater than 2^31 bytes triggers an infinite loop in proxygen::coro::HTTPQuicCoroSession which bl (CVSS 5.3)
- [CVE-2025-55179](https://cve.now/CVE-2025-55179.md): Incomplete validation of rich response messages in WhatsApp for iOS prior to v2.25.23.73, WhatsApp Business for iOS v2.25.23.82, and WhatsAp (CVSS 5.4)
- [CVE-2025-64296](https://cve.now/CVE-2025-64296.md): WordPress Facebook for WooCommerce plugin \<= 3.5.7 - Broken Access Control to Notice Dismissal vulnerability (CVSS 5.3)
- [CVE-2025-55177](https://cve.now/CVE-2025-55177.md): Incomplete authorization of linked device synchronization messages in WhatsApp for iOS prior to v2.25.21.73, WhatsApp Business for iOS v2.25 (CVSS 5.4, KEV)
- [CVE-2025-30403](https://cve.now/CVE-2025-30403.md): A heap-buffer-overflow vulnerability is possible in mvfst via a specially crafted message during a QUIC session. (CVSS 8.1)
- [CVE-2025-30401](https://cve.now/CVE-2025-30401.md): A spoofing issue in WhatsApp for Windows prior to version 2.2450.6 displayed attachments according to their MIME type but selected the file (CVSS 6.7)
- [CVE-2020-36838](https://cve.now/CVE-2020-36838.md): Facebook Chat Plugin \<= 1.5 - Missing Capabilities Check (CVSS 7.4)
- [CVE-2024-45863](https://cve.now/CVE-2024-45863.md): A null-dereference vulnerability involving parsing requests specifying invalid protocols can cause the application to crash or potentially r (CVSS 5.3)
- [CVE-2024-45773](https://cve.now/CVE-2024-45773.md): A use-after-free vulnerability involving upgradeToRocket requests can cause the application to crash or potentially result in code execution (CVSS 7.5)
- [CVE-2023-49062](https://cve.now/CVE-2023-49062.md): Katran could disclose non-initialized kernel memory as part of an IP header. (no CVSS)
- [CVE-2023-38538](https://cve.now/CVE-2023-38538.md): A race condition in an event subsystem led to a heap use-after-free issue in established audio/video calls that could have resulted in app t (CVSS 5.0)
- [CVE-2023-38537](https://cve.now/CVE-2023-38537.md): A race condition in a network transport subsystem led to a heap use-after-free issue in established or unsilenced incoming audio/video calls (CVSS 5.6)
- [CVE-2023-30470](https://cve.now/CVE-2023-30470.md): A use-after-free related to unsound inference in the bytecode generation when optimizations are enabled for Hermes prior to commit da8990f73 (CVSS 9.8)
- [CVE-2023-28753](https://cve.now/CVE-2023-28753.md): netconsd prior to v0.2 was vulnerable to an integer overflow in its parse\_packet function. (CVSS 9.8)
- [CVE-2023-28081](https://cve.now/CVE-2023-28081.md): A bytecode optimization bug in Hermes prior to commit e6ed9c1a4b02dc219de1648f44cd808a56171b81 could be used to cause an use-after-free and (CVSS 9.8)
- [CVE-2023-25933](https://cve.now/CVE-2023-25933.md): A type confusion bug in TypedArray prior to commit e6ed9c1a4b02dc219de1648f44cd808a56171b81 could have been used by a malicious attacker to (CVSS 9.8)
- [CVE-2023-24833](https://cve.now/CVE-2023-24833.md): A use-after-free in BigIntPrimitive addition in Hermes prior to commit a6dcafe6ded8e61658b40f5699878cd19a481f80 could have been used by an a (CVSS 7.5)
- [CVE-2023-24832](https://cve.now/CVE-2023-24832.md): A null pointer dereference bug in Hermes prior to commit 5cae9f72975cf0e5a62b27fdd8b01f103e198708 could have been used by an attacker to cra (CVSS 7.5)
- [CVE-2023-23759](https://cve.now/CVE-2023-23759.md): There is a vulnerability in the fizz library prior to v2023.01.30.00 where a CHECK failure can be triggered remotely. (CVSS 7.5)
- [CVE-2023-23557](https://cve.now/CVE-2023-23557.md): An error in Hermes' algorithm for copying objects properties prior to commit a00d237346894c6067a594983be6634f4168c9ad could be used by a mal (CVSS 9.8)
- [CVE-2023-23556](https://cve.now/CVE-2023-23556.md): An error in BigInt conversion to Number in Hermes prior to commit a6dcafe6ded8e61658b40f5699878cd19a481f80 could have been used by a malicio (CVSS 9.8)
- [CVE-2022-36937](https://cve.now/CVE-2022-36937.md): HHVM 4.172.0 and all prior versions use TLS 1.0 for secure connections when handling tls:// URLs in the stream extension. (CVSS 9.8)
- [CVE-2022-36938](https://cve.now/CVE-2022-36938.md): DexLoader function get\_stringidx\_fromdex() in Redex prior to commit 3b44c64 can load an out of bound address when loading the string index t (CVSS 9.8)
- [CVE-2022-40138](https://cve.now/CVE-2022-40138.md): An integer conversion error in Hermes bytecode generation, prior to commit 6aa825e480d48127b480b08d13adf70033237097, could have been used to (no CVSS)
- [CVE-2022-35289](https://cve.now/CVE-2022-35289.md): A write-what-where condition in hermes caused by an integer overflow, prior to commit 5b6255ae049fa4641791e47fad994e8e8c4da374 allows attack (no CVSS)
- [CVE-2022-32234](https://cve.now/CVE-2022-32234.md): An out of bounds write in hermes, while handling large arrays, prior to commit 06eaec767e376bfdb883d912cb15e987ddf2bda1 allows attackers to (no CVSS)
- [CVE-2022-27810](https://cve.now/CVE-2022-27810.md): It was possible to trigger an infinite recursion condition in the error handler when Hermes executed specific maliciously formed JavaScript. (no CVSS)
- [CVE-2021-24044](https://cve.now/CVE-2021-24044.md): By passing invalid javascript code where await and yield were called upon non-async and non-generator getter/setter functions, Hermes would (no CVSS)
- [CVE-2021-24042](https://cve.now/CVE-2021-24042.md): The calling logic for WhatsApp for Android prior to v2.21.23, WhatsApp Business for Android prior to v2.21.23, WhatsApp for iOS prior to v2. (CVSS 9.8)
- [CVE-2021-24045](https://cve.now/CVE-2021-24045.md): A type confusion vulnerability could be triggered when resolving the "typeof" unary operator in Facebook Hermes prior to v0.10.0. (no CVSS)
- [CVE-2021-24041](https://cve.now/CVE-2021-24041.md): A missing bounds check in image blurring code prior to WhatsApp for Android v2.21.22.7 and WhatsApp Business for Android v2.21.22.7 could ha (no CVSS)
- [CVE-2019-3556](https://cve.now/CVE-2019-3556.md): HHVM supports the use of an "admin" server which accepts administrative requests over HTTP. (no CVSS)
- [CVE-2021-24040](https://cve.now/CVE-2021-24040.md): Due to use of unsafe YAML deserialization logic, an attacker with the ability to modify local YAML configuration files could provide malicio (no CVSS)
- [CVE-2021-24038](https://cve.now/CVE-2021-24038.md): Due to a bug with management of handles in OVRServiceLauncher.exe, an attacker could expose a privileged process handle to an unprivileged p (no CVSS)
- [CVE-2021-24036](https://cve.now/CVE-2021-24036.md): Passing an attacker controlled size when creating an IOBuf could cause integer overflow, leading to an out of bounds write on the heap with (no CVSS)
- [CVE-2021-24037](https://cve.now/CVE-2021-24037.md): A use after free in hermes, while emitting certain error messages, prior to commit d86e185e485b6330216dee8e854455c694e3a36e allows attackers (no CVSS)
- [CVE-2021-24035](https://cve.now/CVE-2021-24035.md): A lack of filename validation when unzipping archives prior to WhatsApp for Android v2.21.8.13 and WhatsApp Business for Android v2.21.8.13 (no CVSS)
- [CVE-2020-1920](https://cve.now/CVE-2020-1920.md): A regular expression denial of service (ReDoS) vulnerability in the validateBaseUrl function can cause the application to use excessive reso (no CVSS)
- [CVE-2021-24028](https://cve.now/CVE-2021-24028.md): An invalid free in Thrift's table-based serialization can cause the application to crash or potentially result in code execution or other un (no CVSS)
- [CVE-2021-24027](https://cve.now/CVE-2021-24027.md): A cache configuration issue prior to WhatsApp for Android v2.21.4.18 and WhatsApp Business for Android v2.21.4.18 may have allowed a third p (no CVSS)
- [CVE-2021-24026](https://cve.now/CVE-2021-24026.md): A missing bounds check within the audio decoding pipeline for WhatsApp calls in WhatsApp for Android prior to v2.21.3, WhatsApp Business for (no CVSS)
- [CVE-2021-24029](https://cve.now/CVE-2021-24029.md): A packet of death scenario is possible in mvfst via a specially crafted message during a QUIC session, which causes a crash via a failed ass (no CVSS)
- [CVE-2020-1900](https://cve.now/CVE-2020-1900.md): When unserializing an object with dynamic properties HHVM needs to pre-reserve the full size of the dynamic property array before inserting (no CVSS)
- [CVE-2020-1899](https://cve.now/CVE-2020-1899.md): The unserialize() function supported a type code, "S", which was meant to be supported only for APC serialization. (no CVSS)
- [CVE-2020-1898](https://cve.now/CVE-2020-1898.md): The fb\_unserialize function did not impose a depth limit for nested deserialization. (no CVSS)
- [CVE-2021-24030](https://cve.now/CVE-2021-24030.md): The fbgames protocol handler registered as part of Facebook Gameroom does not properly quote arguments passed to the executable. (no CVSS)
- [CVE-2021-24025](https://cve.now/CVE-2021-24025.md): Due to incorrect string size calculations inside the preg\_quote function, a large input string passed to the function can trigger an integer (no CVSS)
- [CVE-2020-1921](https://cve.now/CVE-2020-1921.md): In the crypt function, we attempt to null terminate a buffer using the size of the input salt without validating that the offset is within t (no CVSS)
- [CVE-2020-1919](https://cve.now/CVE-2020-1919.md): Incorrect bounds calculations in substr\_compare could lead to an out-of-bounds read when the second string argument passed in is longer than (no CVSS)
- [CVE-2020-1918](https://cve.now/CVE-2020-1918.md): In-memory file operations (ie: using fopen on a data URI) did not properly restrict negative seeking, allowing for the reading of memory pri (no CVSS)
- [CVE-2020-1917](https://cve.now/CVE-2020-1917.md): xbuf\_format\_converter, used as part of exif\_read\_data, was appending a terminating null character to the generated string, but was not using (no CVSS)
- [CVE-2020-1916](https://cve.now/CVE-2020-1916.md): An incorrect size calculation in ldap\_escape may lead to an integer overflow when overly long input is passed in, resulting in an out-of-bou (no CVSS)
- [CVE-2021-24033](https://cve.now/CVE-2021-24033.md): react-dev-utils prior to v11.0.4 exposes a function, getProcessForPort, where an input argument is concatenated into a command string to be (no CVSS)
- [CVE-2021-24032](https://cve.now/CVE-2021-24032.md): Beginning in v1.4.1 and prior to v1.4.9, due to an incomplete fix for CVE-2021-24031, the Zstandard command-line utility created output file (no CVSS)
- [CVE-2021-24031](https://cve.now/CVE-2021-24031.md): In the Zstandard command-line utility prior to v1.4.1, output files were created with default permissions. (no CVSS)
- [CVE-2020-1896](https://cve.now/CVE-2020-1896.md): A stack overflow vulnerability in Facebook Hermes 'builtin apply' prior to commit 86543ac47e59c522976b5632b8bf9a2a4583c7d2 (https://github.c (no CVSS)
- [CVE-2020-1909](https://cve.now/CVE-2020-1909.md): A use-after-free in a logging library in WhatsApp for iOS prior to v2.20.111 and WhatsApp Business for iOS prior to v2.20.111 could have res (no CVSS)
- [CVE-2020-1908](https://cve.now/CVE-2020-1908.md): Improper authorization of the Screen Lock feature in WhatsApp and WhatsApp Business for iOS prior to v2.20.100 could have permitted use of S (no CVSS)
- [CVE-2020-1915](https://cve.now/CVE-2020-1915.md): An out-of-bounds read in the JavaScript Interpreter in Facebook Hermes prior to commit 8cb935cd3b2321c46aa6b7ed8454d95c75a7fca0 allows attac (no CVSS)
- [CVE-2020-1914](https://cve.now/CVE-2020-1914.md): A logic vulnerability when handling the SaveGeneratorLong instruction in Facebook Hermes prior to commit b2021df620824627f5a8c96615edbd1eb7f (no CVSS)
- [CVE-2020-1907](https://cve.now/CVE-2020-1907.md): A stack overflow in WhatsApp for Android prior to v2.20.196.16, WhatsApp Business for Android prior to v2.20.196.12, WhatsApp for iOS prior (no CVSS)
- [CVE-2020-1906](https://cve.now/CVE-2020-1906.md): A buffer overflow in WhatsApp for Android prior to v2.20.130 and WhatsApp Business for Android prior to v2.20.46 could have allowed an out-o (no CVSS)
- [CVE-2020-1905](https://cve.now/CVE-2020-1905.md): Media ContentProvider URIs used for opening attachments in other apps were generated sequentially prior to WhatsApp for Android v2.20.185, w (no CVSS)
- [CVE-2020-1904](https://cve.now/CVE-2020-1904.md): A path validation issue in WhatsApp for iOS prior to v2.20.61 and WhatsApp Business for iOS prior to v2.20.61 could have allowed for directo (no CVSS)
- [CVE-2020-1903](https://cve.now/CVE-2020-1903.md): An issue when unzipping docx, pptx, and xlsx documents in WhatsApp for iOS prior to v2.20.61 and WhatsApp Business for iOS prior to v2.20.61 (no CVSS)
- [CVE-2020-1902](https://cve.now/CVE-2020-1902.md): A user running a quick search on a highly forwarded message on WhatsApp for Android from v2.20.108 to v2.20.140 or WhatsApp Business for And (no CVSS)
- [CVE-2020-1901](https://cve.now/CVE-2020-1901.md): Receiving a large text message containing URLs in WhatsApp for iOS prior to v2.20.91.4 could have caused the application to freeze while pro (no CVSS)
- [CVE-2020-1913](https://cve.now/CVE-2020-1913.md): An Integer signedness error in the JavaScript Interpreter in Facebook Hermes prior to commit 2c7af7ec481ceffd0d14ce2d7c045e475fd71dc6 allows (no CVSS)
- [CVE-2020-1912](https://cve.now/CVE-2020-1912.md): An out-of-bounds read/write vulnerability when executing lazily compiled inner generator functions in Facebook Hermes prior to commit 091835 (no CVSS)
- [CVE-2020-1911](https://cve.now/CVE-2020-1911.md): A type confusion vulnerability when resolving properties of JavaScript objects with specially-crafted prototype chains in Facebook Hermes pr (no CVSS)
- [CVE-2020-1894](https://cve.now/CVE-2020-1894.md): A stack write overflow in WhatsApp for Android prior to v2.20.35, WhatsApp Business for Android prior to v2.20.20, WhatsApp for iPhone prior (no CVSS)
- [CVE-2020-1891](https://cve.now/CVE-2020-1891.md): A user controlled parameter used in video call in WhatsApp for Android prior to v2.20.17, WhatsApp Business for Android prior to v2.20.7, Wh (no CVSS)
- [CVE-2020-1890](https://cve.now/CVE-2020-1890.md): A URL validation issue in WhatsApp for Android prior to v2.20.11 and WhatsApp Business for Android prior to v2.20.2 could have caused the re (no CVSS)
- [CVE-2020-1889](https://cve.now/CVE-2020-1889.md): A security feature bypass issue in WhatsApp Desktop versions prior to v0.3.4932 could have allowed for sandbox escape in Electron and escala (no CVSS)
- [CVE-2020-1886](https://cve.now/CVE-2020-1886.md): A buffer overflow in WhatsApp for Android prior to v2.20.11 and WhatsApp Business for Android prior to v2.20.2 could have allowed an out-of- (no CVSS)
- [CVE-2019-11928](https://cve.now/CVE-2019-11928.md): An input validation issue in WhatsApp Desktop versions prior to v0.3.4932 could have allowed cross-site scripting upon clicking on a link fr (no CVSS)
- [CVE-2020-1897](https://cve.now/CVE-2020-1897.md): A use-after-free is possible due to an error in lifetime management in the request adaptor when a malicious client invokes request error han (no CVSS)
- [CVE-2020-1895](https://cve.now/CVE-2020-1895.md): A large heap overflow could occur in Instagram for Android when attempting to upload an image with specially crafted dimensions. (no CVSS)
- [CVE-2020-1885](https://cve.now/CVE-2020-1885.md): Writing to an unprivileged file from a privileged OVRRedir.exe process in Oculus Desktop before 1.44.0.32849 on Windows allows local users t (no CVSS)
- [CVE-2019-11939](https://cve.now/CVE-2019-11939.md): Golang Facebook Thrift servers would not error upon receiving messages declaring containers of sizes larger than the payload. (no CVSS)
- [CVE-2020-1887](https://cve.now/CVE-2020-1887.md): Incorrect validation of the TLS SNI hostname in osquery versions after 2.9.0 and before 4.2.0 could allow an attacker to MITM osquery traffi (no CVSS)
- [CVE-2019-3553](https://cve.now/CVE-2019-3553.md): C++ Facebook Thrift servers would not error upon receiving messages declaring containers of sizes larger than the payload. (no CVSS)
- [CVE-2019-11938](https://cve.now/CVE-2019-11938.md): Java Facebook Thrift servers would not error upon receiving messages declaring containers of sizes larger than the payload. (no CVSS)
- [CVE-2020-1893](https://cve.now/CVE-2020-1893.md): Insufficient boundary checks when decoding JSON in TryParse reads out of bounds memory, potentially leading to DOS. (no CVSS)
- [CVE-2020-1892](https://cve.now/CVE-2020-1892.md): Insufficient boundary checks when decoding JSON in JSON\_parser allows read access to out of bounds memory, potentially leading to informatio (no CVSS)
- [CVE-2020-1888](https://cve.now/CVE-2020-1888.md): Insufficient boundary checks when decoding JSON in handleBackslash reads out of bounds memory, potentially leading to DOS. (no CVSS)
- [CVE-2019-18426](https://cve.now/CVE-2019-18426.md): A vulnerability in WhatsApp Desktop versions prior to 0.3.9309 when paired with WhatsApp for iPhone versions prior to 2.20.10 allows cross-s (CVSS 8.2, KEV)
- [CVE-2019-11940](https://cve.now/CVE-2019-11940.md): In the course of decompressing HPACK inside the HTTP2 protocol, an unexpected sequence of header table resize operations can place the heade (no CVSS)
- [CVE-2019-11936](https://cve.now/CVE-2019-11936.md): Various APC functions accept keys containing null bytes as input, leading to premature truncation of input. (no CVSS)
- [CVE-2019-11935](https://cve.now/CVE-2019-11935.md): Insufficient boundary checks when processing a string in mb\_ereg\_replace allows access to out-of-bounds memory. (no CVSS)
- [CVE-2019-11934](https://cve.now/CVE-2019-11934.md): Improper handling of close\_notify alerts can result in an out-of-bounds read in AsyncSSLSocket. (no CVSS)
- [CVE-2019-11930](https://cve.now/CVE-2019-11930.md): An invalid free in mb\_detect\_order can cause the application to crash or potentially result in remote code execution. (no CVSS)
- [CVE-2019-11937](https://cve.now/CVE-2019-11937.md): In Mcrouter prior to v0.41.0, a large struct input provided to the Carbon protocol reader could result in stack exhaustion and denial of ser (no CVSS)
- [CVE-2019-11923](https://cve.now/CVE-2019-11923.md): In Mcrouter prior to v0.41.0, the deprecated ASCII parser would allocate a buffer to a user-specified length with no maximum length enforced (no CVSS)
- [CVE-2019-11931](https://cve.now/CVE-2019-11931.md): A stack-based buffer overflow could be triggered in WhatsApp by sending a specially crafted MP4 file to a WhatsApp user. (no CVSS)
- [CVE-2019-11933](https://cve.now/CVE-2019-11933.md): A heap buffer overflow bug in libpl\_droidsonroids\_gif before 1.2.19, as used in WhatsApp for Android before version 2.19.291 could allow rem (no CVSS)
- [CVE-2019-11929](https://cve.now/CVE-2019-11929.md): Insufficient boundary checks when formatting numbers in number\_format allows read/write access to out-of-bounds memory, potentially leading (no CVSS)
- [CVE-2019-11927](https://cve.now/CVE-2019-11927.md): An integer overflow in WhatsApp media parsing libraries allows a remote attacker to perform an out-of-bounds write on the heap via specially (no CVSS)
- [CVE-2019-11926](https://cve.now/CVE-2019-11926.md): Insufficient boundary checks when processing M\_SOFx markers from JPEG headers in the GD extension could allow access to out-of-bounds memory (no CVSS)
- [CVE-2019-11925](https://cve.now/CVE-2019-11925.md): Insufficient boundary checks when processing the JPEG APP12 block marker in the GD extension could allow access to out-of-bounds memory via (no CVSS)
- [CVE-2019-11924](https://cve.now/CVE-2019-11924.md): A peer could send empty handshake fragments containing only padding which would be kept in memory until a full handshake was received, resul (no CVSS)
- [CVE-2019-11921](https://cve.now/CVE-2019-11921.md): An out of bounds write is possible via a specially crafted packet in certain configurations of Proxygen due to improper handling of Base64 w (no CVSS)
- [CVE-2019-11922](https://cve.now/CVE-2019-11922.md): A race condition in the one-pass compression functions of Zstandard prior to version 1.3.8 could allow an attacker to write bytes out of bou (no CVSS)
- [CVE-2019-3570](https://cve.now/CVE-2019-3570.md): Call to the scrypt\_enc() function in HHVM can lead to heap corruption by using specifically crafted parameters (N, r and p). (no CVSS)
- [CVE-2019-3571](https://cve.now/CVE-2019-3571.md): An input validation issue affected WhatsApp Desktop versions prior to 0.3.3793 which allows malicious clients to send files to users that wo (no CVSS)
- [CVE-2019-3569](https://cve.now/CVE-2019-3569.md): HHVM, when used with FastCGI, would bind by default to all available interfaces. (no CVSS)
- [CVE-2018-6350](https://cve.now/CVE-2018-6350.md): An out-of-bounds read was possible in WhatsApp due to incorrect parsing of RTP extension headers. (no CVSS)
- [CVE-2018-6349](https://cve.now/CVE-2018-6349.md): When receiving calls using WhatsApp for Android, a missing size check when parsing a sender-provided packet allowed for a stack-based overfl (no CVSS)
- [CVE-2018-6339](https://cve.now/CVE-2018-6339.md): When receiving calls using WhatsApp on Android, a stack allocation failed to properly account for the amount of data being passed in. (no CVSS)
- [CVE-2018-20655](https://cve.now/CVE-2018-20655.md): When receiving calls using WhatsApp for iOS, a missing size check when parsing a sender-provided packet allowed for a stack-based overflow. (no CVSS)
- [CVE-2019-3567](https://cve.now/CVE-2019-3567.md): In some configurations an attacker can inject a new executable path into the extensions.load file for osquery and hard link a parent folder (no CVSS)
- [CVE-2019-3568](https://cve.now/CVE-2019-3568.md): A buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via specially crafted series of RTCP packets sent to a (CVSS 9.8, KEV)
- [CVE-2019-3566](https://cve.now/CVE-2019-3566.md): A bug in WhatsApp for Android's messaging logic would potentially allow a malicious individual who has taken over over a WhatsApp user's acc (no CVSS)
- [CVE-2019-3565](https://cve.now/CVE-2019-3565.md): Legacy C++ Facebook Thrift servers (using cpp instead of cpp2) would not error upon receiving messages with containers of fields of unknown (no CVSS)
- [CVE-2019-3564](https://cve.now/CVE-2019-3564.md): Go Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type. (no CVSS)
- [CVE-2019-3559](https://cve.now/CVE-2019-3559.md): Java Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type. (no CVSS)
- [CVE-2019-3558](https://cve.now/CVE-2019-3558.md): Python Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type. (no CVSS)
- [CVE-2019-3552](https://cve.now/CVE-2019-3552.md): C++ Facebook Thrift servers (using cpp2) would not error upon receiving messages with containers of fields of unknown type. (no CVSS)
- [CVE-2019-3563](https://cve.now/CVE-2019-3563.md): Wangle's LineBasedFrameDecoder contains logic for identifying newlines which incorrectly advances a buffer, leading to a potential underflow (no CVSS)
- [CVE-2019-3561](https://cve.now/CVE-2019-3561.md): Insufficient boundary checks for the strrpos and strripos functions allow access to out-of-bounds memory. (no CVSS)
- [CVE-2019-3560](https://cve.now/CVE-2019-3560.md): An improperly performed length calculation on a buffer in PlaintextRecordLayer could lead to an infinite loop and denial-of-service based on (no CVSS)
- [CVE-2019-3557](https://cve.now/CVE-2019-3557.md): The implementations of streams for bz2 and php://output improperly implemented their readImpl functions, returning -1 consistently. (no CVSS)
- [CVE-2019-3554](https://cve.now/CVE-2019-3554.md): Wangle's AcceptRoutingHandler incorrectly casts a socket when accepting a TLS 1.3 connection, leading to a potential denial of service attac (no CVSS)
- [CVE-2018-6345](https://cve.now/CVE-2018-6345.md): The function number\_format is vulnerable to a heap overflow issue when its second argument ($dec\_points) is excessively large. (no CVSS)
- [CVE-2018-6333](https://cve.now/CVE-2018-6333.md): The hhvm-attach deep link handler in Nuclide did not properly sanitize the provided hostname parameter when rendering. (CVSS 9.8)
- [CVE-2018-6331](https://cve.now/CVE-2018-6331.md): Buck parser-cache command loads/saves state using Java serialized object. (CVSS 9.8)
- [CVE-2018-6347](https://cve.now/CVE-2018-6347.md): An issue in the Proxygen handling of HTTP2 parsing of headers/trailers can lead to a denial-of-service attack. (CVSS 7.5)
- [CVE-2018-6346](https://cve.now/CVE-2018-6346.md): A potential denial-of-service issue in the Proxygen handling of invalid HTTP2 priority settings (specifically a circular dependency). (CVSS 7.5)
- [CVE-2018-6344](https://cve.now/CVE-2018-6344.md): A heap corruption in WhatsApp can be caused by a malformed RTP packet being sent after a call is established. (CVSS 7.5)
- [CVE-2018-6343](https://cve.now/CVE-2018-6343.md): Proxygen fails to validate that a secondary auth manager is set before dereferencing it. (CVSS 7.5)
- [CVE-2018-6342](https://cve.now/CVE-2018-6342.md): react-dev-utils on Windows allows developers to run a local webserver for accepting various commands, including a command to launch an edito (CVSS 9.8)
- [CVE-2018-6341](https://cve.now/CVE-2018-6341.md): React applications which rendered to HTML using the ReactDOMServer API were not escaping user-supplied attribute names at render-time. (CVSS 6.1)
- [CVE-2018-6340](https://cve.now/CVE-2018-6340.md): The Memcache::getextendedstats function can be used to trigger an out-of-bounds read. (CVSS 8.1)
- [CVE-2018-6337](https://cve.now/CVE-2018-6337.md): folly::secureRandom will re-use a buffer between parent and child processes when fork() is called. (CVSS 7.5)
- [CVE-2018-6336](https://cve.now/CVE-2018-6336.md): An issue was discovered in osquery. (CVSS 7.8)
- [CVE-2018-6335](https://cve.now/CVE-2018-6335.md): A Malformed h2 frame can cause 'std::out\_of\_range' exception when parsing priority meta data. (CVSS 7.5)
- [CVE-2018-6334](https://cve.now/CVE-2018-6334.md): Multipart-file uploads call variables to be improperly registered in the global scope. (CVSS 9.8)
- [CVE-2018-6332](https://cve.now/CVE-2018-6332.md): A potential denial-of-service issue in the Proxygen handling of invalid HTTP2 settings which can cause the server to spend disproportionate (CVSS 5.9)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/facebook
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.