A flaw was found in proxygen. The WebTransport implementation fails to unregister read callbacks for closed streams before destroying them. This issue results in a use-after-free condition, where the transport attempts to invoke memory that has already been released. A remote attacker can exploit this vulnerability to cause a Denial of Service (DoS) via an application crash or potentially execute arbitrary code.
Last checked: 2026-09-30 21:40 UTC
No exploitation evidence · CISA Coordinator (Assessed 2026-09-30 19:47 UTC)
Fix evidence last checked: 2026-09-29 07:13 UTC