Skip to content

Known vulnerabilities in Facebook Thrift

Is your version affected?

CVE Summary Score Published
CVE-2024-45863 A null-dereference vulnerability involving parsing requests specifying invalid protocols can cause the application to… 5.3 Medium Sep 27, 2024
CVE-2024-45773 A use-after-free vulnerability involving upgradeToRocket requests can cause the application to crash or potentially… 7.5 High Sep 27, 2024
CVE-2021-24028 An invalid free in Thrift's table-based serialization can cause the application to crash or potentially result in code… Not rated Apr 13, 2021
CVE-2019-11939 Golang Facebook Thrift servers would not error upon receiving messages declaring containers of sizes larger than the… Not rated Mar 18, 2020
CVE-2019-3553 C++ Facebook Thrift servers would not error upon receiving messages declaring containers of sizes larger than the… Not rated Mar 10, 2020
CVE-2019-11938 Java Facebook Thrift servers would not error upon receiving messages declaring containers of sizes larger than the… Not rated Mar 10, 2020
CVE-2019-3558 Python Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type Not rated May 6, 2019
CVE-2019-3565 Legacy C++ Facebook Thrift servers (using cpp instead of cpp2) would not error upon receiving messages with containers… Not rated May 6, 2019
CVE-2019-3564 Go Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type Not rated May 6, 2019
CVE-2019-3552 C++ Facebook Thrift servers (using cpp2) would not error upon receiving messages with containers of fields of unknown… Not rated May 6, 2019
CVE-2019-3559 Java Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type Not rated May 6, 2019

Other Facebook products