Insufficient boundary checks when decoding JSON in JSON_parser allows read access to out of bounds memory, potentially leading to information leak and DOS. This issue affects HHVM 4.45.0, 4.44.0, 4.43.0, 4.42.0, 4.41.0, 4.40.0, 4.39.0, versions between 4.33.0 and 4.38.0 (inclusive), versions between 4.9.0 and 4.32.0 (inclusive), and versions prior to 4.8.7.
References
Link | Resource |
---|---|
https://github.com/facebook/hhvm/commit/dabd48caf74995e605f1700344f1ff4a5d83441d | Patch |
https://hhvm.com/blog/2020/02/20/security-update.html | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2020-03-03 15:15
Updated : 2024-02-28 17:28
NVD link : CVE-2020-1892
Mitre link : CVE-2020-1892
CVE.ORG link : CVE-2020-1892
JSON object : View
Products Affected
- hhvm
CWE
CWE-125
Out-of-bounds Read