CVE Catalog
CVE-2015-7264
CriticalSummary
The SPDY/2 codec in Facebook Proxygen before 2015-11-09 truncates a certain field to two bytes, which allows hijacking and injection attacks.
Risk Assessment
An attacker could exploit this vulnerability to hijack user sessions or inject malicious code, posing a serious threat to data security.
Recommendation
It is recommended to update Facebook Proxygen to a version after 2015-11-09 to mitigate this vulnerability.
Original NVD description (English source)
The SPDY/2 codec in Facebook Proxygen before 2015-11-09 truncates a certain field to two bytes, which allows hijacking and injection attacks.