Skip to content
Sign in
Not rated

CVE-2019-11940 In the course of decompressing HPACK inside the HTTP2 protocol, an unexpected sequence of header table resize operations…

Description

In the course of decompressing HPACK inside the HTTP2 protocol, an unexpected sequence of header table resize operations can place the header table into a corrupted state, leading to a use-after-free condition and undefined behavior. This issue affects Proxygen from v0.29.0 until v2017.04.03.00.

Affected products and versions

Product Affected versions Fixed in
Proxygen 2017.04.03.00 No fix stated
Proxygen 0.29 0.29.0 → latest No fix stated

Other CVEs of Proxygen

The 12 CVEs of Proxygen →
CVE-2026-91096 In proxygen from v2024.10.28.00 until v2026.09.28.00, WebTransportImpl::terminateSessionStreams… 7.5 High CVE-2026-91095 In proxygen from v2024.10.28.00 until v2026.09.28.00, the HTTPTransaction::onWebTransportUniStream and… 5.3 Medium CVE-2026-84895 In proxygen from v2026.04.06.00 until v2026.09.28.00, QuicWtSession::closeSession accesses its member fields after… 7.3 High CVE-2026-44909 Proxygen lacked a generalized slow-consumer detection mechanism in its core HTTP session layer 7.5 High
Track this CVE