CVE-2024-45773

high

Description

A use-after-free vulnerability involving upgradeToRocket requests can cause the application to crash or potentially result in code execution or other undesirable effects. This issue affects Facebook Thrift prior to v2024.09.09.00.

References

https://www.facebook.com/security/advisories/cve-2024-45773

https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-41595

Details

Source: Mitre, NVD

Published: 2024-09-27

Updated: 2026-04-15

Risk Information

CVSS v2

Base Score: 7.1

Vector: CVSS2#AV:N/AC:H/Au:S/C:C/I:C/A:C

Severity: High

CVSS v3

Base Score: 7.5

Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H