CVE-2021-24028

    Dashboard / Vulnerabilities / CVE-2021-24028

    CVE-2021-24028

    Published: 14 Apr 2021Last Modified: 9 Jul 2026

    Summary:

    Details: An invalid free in Thrift's table-based serialization can cause the application to crash or potentially result in code execution or other undesirable effects. This issue affects Facebook Thrift prior to v2021.02.22.00.

    References: https://www.facebook.com/security/advisories/cve-2021-24028, https://github.com/facebook/fbthrift/commit/bfda1efa547dce11a38592820916db01b05b9339

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -a0eb44d20005e25284d0204f42387ff872bf52b9

    Affected versions

    v2021.02.15.00
    v2021.02.08.00
    v2021.02.01.00

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2021-24028 | CVE-DB