CVE-2024-45863: Facebook Thrift

Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days.

A null-dereference vulnerability involving parsing requests specifying invalid protocols can cause the application to crash or potentially result in other undesirable effects. This issue affects Facebook Thrift from v2024.09.09.00 until v2024.09.23.00.

Affected products

• Facebook Facebook Thrift: from v2024.09.09.00, before v2024.09.23.00 (fixed in v2024.09.23.00)
• Facebook Thrift: from 2024.09.09.00, before 2024.09.23.00 (fixed in 2024.09.23.00)

Published 2024-09-27. Last modified 2026-06-17.