CVE-2019-3560CWE-835

CVE-2019-3560: vulnerability in Facebook fizz

Published · Updated

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 2.4%
An improperly performed length calculation on a buffer in PlaintextRecordLayer could lead to an infinite loop and denial-of-service based on user input. This issue affected versions of fizz prior to v2019.03.04.00.
Affected products
Facebook · fizz
Related CVEs — Facebook fizz

In the same product, most dangerous first.