CVE-2019-11924

CVE-2019-11924 is a memory exhaustion vulnerability affecting Facebook's fizz library, specifically versions v2019.01.28.00 through v2019.08.05.00. An unauthenticated attacker could send specially crafted, empty handshake fragments containing only padding, causing the server to retain these fragments in memory until a complete handshake is received, ultimately leading to a denial-of-service. This vulnerability is rated as HIGH severity (CVSS 7.5) due to its network-based attack vector, low attack complexity, and high impact on availability. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.