CVE-2019-3563

CRITICAL

Facebook Wangle < 2019.04.22.00 - Out-of-Bounds Write

Title source: rule
STIX 2.1

Description

Wangle's LineBasedFrameDecoder contains logic for identifying newlines which incorrectly advances a buffer, leading to a potential underflow. This affects versions of Wangle prior to v2019.04.22.00

References (1)

Core 1

Scores

CVSS v3 9.8
EPSS 0.0043
EPSS Percentile 62.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-126 CWE-787
Status published
Products (1)
facebook/wangle < 2019.04.22.00
Published Apr 29, 2019
Tracked Since Feb 18, 2026