fizz vulnerabilities

1 known vulnerability in fizz from Facebook. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  fizz: Reachable Assertion

  CVE-2023-23759May 18, 2023Facebook

  There is a vulnerability in the fizz library prior to v2023.01.30.00 where a CHECK failure can be triggered remotely. This behavior requires the client supported cipher advertisement changing between the original ClientHello and the second ClientHello, crashin