Facebook Hhvm
41 CVEs affecting Facebook Hhvm. Latest disclosed: 2023-05-10. Critical: 26, High: 13.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-36937 | Critical | 9.8 | 2023-05-10 | HHVM 4.172.0 and all prior versions use TLS 1.0 for secure connections when handling tls:// URLs in the stream extension. TLS1.0 has numerous published vulnera… |
CVE-2021-24036 | Critical | 9.8 | 2021-07-23 | Passing an attacker controlled size when creating an IOBuf could cause integer overflow, leading to an out of bounds write on the heap with the possibility of… |
CVE-2020-1900 | Critical | 9.8 | 2021-03-11 | When unserializing an object with dynamic properties HHVM needs to pre-reserve the full size of the dynamic property array before inserting anything into it. O… |
CVE-2021-24025 | Critical | 9.8 | 2021-03-10 | Due to incorrect string size calculations inside the preg_quote function, a large input string passed to the function can trigger an integer overflow leading t… |
CVE-2020-1917 | Critical | 9.8 | 2021-03-10 | xbuf_format_converter, used as part of exif_read_data, was appending a terminating null character to the generated string, but was not using its standard appen… |
CVE-2020-1916 | Critical | 9.8 | 2021-03-10 | An incorrect size calculation in ldap_escape may lead to an integer overflow when overly long input is passed in, resulting in an out-of-bounds write. This iss… |
CVE-2016-1000005 | Critical | 9.8 | 2020-02-19 | mcrypt_get_block_size did not enforce that the provided "module" parameter was a string, leading to type confusion if other types of data were passed in. This… |
CVE-2016-1000004 | Critical | 9.8 | 2020-02-19 | Insufficient type checks were employed prior to casting input data in SimpleXMLElement_exportNode and simplexml_import_dom. This issue affects HHVM versions pr… |
CVE-2019-11936 | Critical | 9.8 | 2019-12-04 | Various APC functions accept keys containing null bytes as input, leading to premature truncation of input. This issue affects HHVM versions prior to 3.30.12… |
CVE-2019-11935 | Critical | 9.8 | 2019-12-04 | Insufficient boundary checks when processing a string in mb_ereg_replace allows access to out-of-bounds memory. This issue affects HHVM versions prior to 3.30… |
CVE-2019-11930 | Critical | 9.8 | 2019-12-04 | An invalid free in mb_detect_order can cause the application to crash or potentially result in remote code execution. This issue affects HHVM versions prior to… |
CVE-2016-1000006 | Critical | 9.8 | 2019-11-19 | hhvm before 3.12.11 has a use-after-free in the serialize_memoize_param() and ResourceBundle::__construct() functions. |
CVE-2019-11929 | Critical | 9.8 | 2019-10-02 | Insufficient boundary checks when formatting numbers in number_format allows read/write access to out-of-bounds memory, potentially leading to remote code exec… |
CVE-2019-11926 | Critical | 9.8 | 2019-09-06 | Insufficient boundary checks when processing M_SOFx markers from JPEG headers in the GD extension could allow access to out-of-bounds memory via a maliciously… |
CVE-2019-11925 | Critical | 9.8 | 2019-09-06 | Insufficient boundary checks when processing the JPEG APP12 block marker in the GD extension could allow access to out-of-bounds memory via a maliciously const… |
CVE-2019-3570 | Critical | 9.8 | 2019-07-18 | Call to the scrypt_enc() function in HHVM can lead to heap corruption by using specifically crafted parameters (N, r and p). This happens if the parameters are… |
CVE-2019-3561 | Critical | 9.8 | 2019-04-29 | Insufficient boundary checks for the strrpos and strripos functions allow access to out-of-bounds memory. This affects all supported versions of HHVM (4.0.3, 3… |
CVE-2019-3557 | Critical | 9.8 | 2019-01-15 | The implementations of streams for bz2 and php://output improperly implemented their readImpl functions, returning -1 consistently. This behavior caused some s… |
CVE-2018-6345 | Critical | 9.8 | 2019-01-15 | The function number_format is vulnerable to a heap overflow issue when its second argument ($dec_points) is excessively large. The internal implementation of t… |
CVE-2018-6334 | Critical | 9.8 | 2018-12-31 | Multipart-file uploads call variables to be improperly registered in the global scope. In cases where variables are not declared explicitly before being used t… |