CVE-2026-84894 | Meta Platforms moxygen WebTransport dataStreamReadLoop use after free

A vulnerability classified as critical was found in Meta Platforms moxygen. Impacted is the function MoQSession::dataStreamReadLoop of the component WebTransport. Such manipulation leads to use after free.

This vulnerability is uniquely identified as CVE-2026-84894. The attack can be launched remotely. No exploit exists.

Applying a patch is advised to resolve this issue.VulDB Recent EntriesRead More