CVE-2019-3560: Facebook Fizz

High severity, CVSS 7.5. EPSS: 2.4% chance of exploitation in the next 30 days.

An improperly performed length calculation on a buffer in PlaintextRecordLayer could lead to an infinite loop and denial-of-service based on user input. This issue affected versions of fizz prior to v2019.03.04.00.

Affected products

• Facebook Fizz: before 2019.03.04.00 (fixed in 2019.03.04.00)

Published 2019-04-29. Last modified 2026-06-17.