CVE Intelligence

Meta Platforms, Inc Moxygen vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Meta Platforms, Inc Moxygen: 1 record(s), with affected versions and fixes.

CVE-2026-84894 High · 7.5 CWE-416 Sep 28, 2026
Use After Free in Meta Platforms, Inc Moxygen
In moxygen before commit 004123dd24c3, MoQSession::dataStreamReadLoop keeps using a stream read handle after reading a FIN, which invalidates the handle under proxygen's WebTransport API. A remote peer can trigger the stale use by opening a data stream that names an unknown track alias and carries the FIN in the same write.