Skip to content
Sign in
5.3 Medium

CVE-2025-55181 Sending an HTTP request/response body with greater than 2^31 bytes triggers an infinite loop in…

Description

Sending an HTTP request/response body with greater than 2^31 bytes triggers an infinite loop in proxygen::coro::HTTPQuicCoroSession which blocks the backing event loop and unconditionally appends data to a std::vector per-loop iteration. This issue leads to unbounded memory growth and eventually causes the process to run out of memory.

Affected products and versions

Product Affected versions Fixed in
Proxygen 2025.08 2025.08.25.00 → 2025.12.01.00 No fix stated

Other CVEs of Proxygen

The 12 CVEs of Proxygen →
CVE-2026-91096 In proxygen from v2024.10.28.00 until v2026.09.28.00, WebTransportImpl::terminateSessionStreams… 7.5 High CVE-2026-91095 In proxygen from v2024.10.28.00 until v2026.09.28.00, the HTTPTransaction::onWebTransportUniStream and… 5.3 Medium CVE-2026-84895 In proxygen from v2026.04.06.00 until v2026.09.28.00, QuicWtSession::closeSession accesses its member fields after… 7.3 High CVE-2026-44909 Proxygen lacked a generalized slow-consumer detection mechanism in its core HTTP session layer 7.5 High
Track this CVE