Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2026-84894

In moxygen before commit 004123dd24c3, MoQSession::dataStreamReadLoop keeps using a stream read handle after reading a FIN, which invalidates the handle under proxygen's WebTranspo

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Meta

Description

In moxygen before commit 004123dd24c3, MoQSession::dataStreamReadLoop keeps using a stream read handle after reading a FIN, which invalidates the handle under proxygen's WebTransport API. A remote peer can trigger the stale use by opening a data stream that names an unknown track alias and carries the FIN in the same write.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Meta Platforms, Inc moxygen

Default version status: unaffected

  • b24f8e65cb83ebe5f3880cc4e3a4c8f64e1882f9 to < 004123dd24c30dad6b649163575145f240dabc94affected

References