CVE-2021-24030 | BDVDB-2026-150263 Detail

FacebookFacebook Gameroom

Description#

The fbgames protocol handler registered as part of Facebook Gameroom does not properly quote arguments passed to the executable. That allows a malicious URL to cause code execution. This issue affects versions prior to v1.26.0.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-88 Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') (CWE-88)

References#

https://www.facebook.com/security/advisories/cve-2021-24030

Exploit#

No public exploit known

History#

Version 12021-03-10Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.