Facebook vulnerabilities
147 CVEs and advisories name Facebook as an affected vendor, 3 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2019-3568A buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via specially crafted series of RTCP packets sent to a
- CVE-2019-3566A bug in WhatsApp for Android's messaging logic would potentially allow a malicious individual who has taken over over a WhatsApp user's acc
- CVE-2019-3565Legacy C++ Facebook Thrift servers (using cpp instead of cpp2) would not error upon receiving messages with containers of fields of unknown
- CVE-2019-3564Go Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type.
- CVE-2019-3559Java Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type.
- CVE-2019-3558Python Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type.
- CVE-2019-3552C++ Facebook Thrift servers (using cpp2) would not error upon receiving messages with containers of fields of unknown type.
- CVE-2019-3563Wangle's LineBasedFrameDecoder contains logic for identifying newlines which incorrectly advances a buffer, leading to a potential underflow
- CVE-2019-3561Insufficient boundary checks for the strrpos and strripos functions allow access to out-of-bounds memory.
- CVE-2019-3560An improperly performed length calculation on a buffer in PlaintextRecordLayer could lead to an infinite loop and denial-of-service based on
- CVE-2019-3557The implementations of streams for bz2 and php://output improperly implemented their readImpl functions, returning -1 consistently.
- CVE-2019-3554Wangle's AcceptRoutingHandler incorrectly casts a socket when accepting a TLS 1.3 connection, leading to a potential denial of service attac
- CVE-2018-6345The function number_format is vulnerable to a heap overflow issue when its second argument ($dec_points) is excessively large.
- CVE-2018-6333The hhvm-attach deep link handler in Nuclide did not properly sanitize the provided hostname parameter when rendering.
- CVE-2018-6331Buck parser-cache command loads/saves state using Java serialized object.
- CVE-2018-6347An issue in the Proxygen handling of HTTP2 parsing of headers/trailers can lead to a denial-of-service attack.
- CVE-2018-6346A potential denial-of-service issue in the Proxygen handling of invalid HTTP2 priority settings (specifically a circular dependency).
- CVE-2018-6344A heap corruption in WhatsApp can be caused by a malformed RTP packet being sent after a call is established.
- CVE-2018-6343Proxygen fails to validate that a secondary auth manager is set before dereferencing it.
- CVE-2018-6342react-dev-utils on Windows allows developers to run a local webserver for accepting various commands, including a command to launch an edito
- CVE-2018-6341React applications which rendered to HTML using the ReactDOMServer API were not escaping user-supplied attribute names at render-time.
- CVE-2018-6340The Memcache::getextendedstats function can be used to trigger an out-of-bounds read.
- CVE-2018-6337folly::secureRandom will re-use a buffer between parent and child processes when fork() is called.
- CVE-2018-6336An issue was discovered in osquery.
- CVE-2018-6335A Malformed h2 frame can cause 'std::out_of_range' exception when parsing priority meta data.
- CVE-2018-6334Multipart-file uploads call variables to be improperly registered in the global scope.
- CVE-2018-6332A potential denial-of-service issue in the Proxygen handling of invalid HTTP2 settings which can cause the server to spend disproportionate