CVE-2019-11921

CRITICAL 9.8CVE-2019-11921 · Published 25/07/2019 · updated 17/06/2026

In short

CVE-2019-11921 is a CRITICAL (CVSS 9.8) vulnerability affecting proxygen (facebook).
Chance of exploitation in the next 30 days (EPSS): 2.1%, higher than 81.5% of all vulnerabilities.
Fix: update to 2019.07.22.00 or later.

Package	Affected versions	Patched versions
proxygen facebook	`< 2019.07.22.00`	`2019.07.22.00`

Description

An out of bounds write is possible via a specially crafted packet in certain configurations of Proxygen due to improper handling of Base64 when parsing malformed binary content in Structured HTTP Headers. This issue affects versions of proxygen prior to v2019.07.22.00.

References

facebook/proxygen commit 2f07985 · Patch
facebook.com/security/advisories/cve-2019-11921 · Third Party Advisory

More vulnerabilities in proxygen

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

proxygen

facebook

< 2019.07.22.00

2019.07.22.00

More vulnerabilities in proxygen

See all →