Insufficient boundary checks when decoding JSON in JSON_parser allows read access to out of bounds memory, potentially leading to information leak and DOS. This issue affects HHVM 4.45.0, 4.44.0, 4.43.0, 4.42.0, 4.41.0, 4.40.0, 4.39.0, versions between 4.33.0 and 4.38.0 (inclusive), versions between 4.9.0 and 4.32.0 (inclusive), and versions prior to 4.8.7.
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 05:11
Type | Values Removed | Values Added |
---|---|---|
References | () https://github.com/facebook/hhvm/commit/dabd48caf74995e605f1700344f1ff4a5d83441d - Patch | |
References | () https://hhvm.com/blog/2020/02/20/security-update.html - Vendor Advisory |
Information
Published : 2020-03-03 15:15
Updated : 2024-11-21 05:11
NVD link : CVE-2020-1892
Mitre link : CVE-2020-1892
CVE.ORG link : CVE-2020-1892
JSON object : View
Products Affected
- hhvm
CWE
CWE-125
Out-of-bounds Read