CVE-2024-45863

5.3 mediumEPSS 0.4%

Medium (5.3). EPSS 0.4% chance of exploitation in the next 30 days.

A null-dereference vulnerability involving parsing requests specifying invalid protocols can cause the application to crash or potentially result in other undesirable effects. This issue affects Facebook Thrift from v2024.09.09.00 until v2024.09.23.00.

Severity

CVSS 3.1

5.3 medium

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 28% of CVEs (scores of 2026-10-31)
Published: 2024-09-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://www.facebook.com/security/advisories/cve-2024-45863

Check your stack JSON