CVE-2021-24028

State: Published
Severity: Not scored
Published: Apr 13, 2021
Updated: Aug 3, 2024
Reserved: Jan 13, 2021

Description

An invalid free in Thrift's table-based serialization can cause the application to crash or potentially result in code execution or other undesirable effects. This issue affects Facebook Thrift prior to v2021.02.22.00.

Scores

The record has no CVSS score.

Weaknesses

CWE-763 Release of Invalid Pointer or Reference

Affected Products

Product	Versions
Facebook ThriftFacebook	before v2021.02.22.00Affected v2021.02.22.00 to before unspecifiedNot affected

References

https://github.com/facebook/fbthrift/commit/bfda1efa547dce11a38592820916db01b05b9339
https://www.facebook.com/security/advisories/cve-2021-24028

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.