Threats Tagged 'ghsa-ppxw-566f-wjp6'

CVE-2026-84895 is a use-after-free vulnerability in Facebook's proxygen library affecting versions from 2026.04.06.00 up to but not including 2026.09.28.00. The issue occurs when QuicWtSession::closeSession accesses member fields after the base class method QuicWtSessionBase::closeSession potentially destroys the session object. This can lead to memory corruption and impacts confidentiality, integrity, and availability.