The SPDY/2 codec in Facebook Proxygen before 2015-11-09 truncates a certain field to two bytes, which allows hijacking and injection attacks.
[
{
"product": "Facebook Proxygen before 2015-11-09",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "Facebook Proxygen before 2015-11-09"
}
]
}
]