A flaw was found in proxygen. During session closure, member data continues to be accessed after calling the base termination method, which may notify the session handler and destroy the session object. A remote attacker can exploit this use-after-free condition to cause a Denial of Service (DoS) through an application crash or potentially trigger memory corruption.
Last checked: 2026-10-01 15:51 UTC
No exploitation evidence · CISA Coordinator (Assessed 2026-10-01 14:01 UTC)
Fix evidence last checked: 2026-09-29 06:58 UTC