Buffer overflow in Facebook Hhvm

CVE-2020-1917

xbuf_format_converter, used as part of exif_read_data, was appending a terminating null character to the generated string, but was not using its standard append char function. As a result, if the buffer was full, it would result in an out-…

Vulnerability class: Buffer Overflow

EPSS: 0.007 (73.5th percentile) — read the EPSS interpretation.