Facebook HHVM vulnerabilities

CVEs per yearBy the year they were published

1. 201911
2. 20196
3. 20212
4. 202111
5. 20231

Newest CVEs

• CVE-2022-36937

  HHVM 4.172.0 and all prior versions use TLS 1.0 for secure connections when handling tls:// URLs in the stream extension. TLS1.0 has numerous published…

  Facebook · HHVM

  Critical9.8
• CVE-2019-3556

  HHVM supports the use of an "admin" server which accepts administrative requests over HTTP. One of those request handlers, dump-pcre-cache, can be used to…

  Facebook · HHVM

  High8.1
• CVE-2021-24036

  Passing an attacker controlled size when creating an IOBuf could cause integer overflow, leading to an out of bounds write on the heap with the possibility of…

  Facebook · folly

  Critical9.8
• CVE-2020-1900

  When unserializing an object with dynamic properties HHVM needs to pre-reserve the full size of the dynamic property array before inserting anything into it.…

  Facebook · HHVM

  Critical9.8
• CVE-2020-1899

  The unserialize() function supported a type code, "S", which was meant to be supported only for APC serialization. This type code allowed arbitrary memory…

  Facebook · HHVM

  High7.5
• CVE-2020-1898

  The fb_unserialize function did not impose a depth limit for nested deserialization. That meant a maliciously constructed string could cause deserialization to…

  Facebook · HHVM

  High7.5
• CVE-2021-24025

  Due to incorrect string size calculations inside the preg_quote function, a large input string passed to the function can trigger an integer overflow leading…

  Facebook · HHVM

  Critical9.8
• CVE-2020-1921

  In the crypt function, we attempt to null terminate a buffer using the size of the input salt without validating that the offset is within the buffer. This…

  Facebook · HHVM

  High7.5
• CVE-2020-1919

  Incorrect bounds calculations in substr_compare could lead to an out-of-bounds read when the second string argument passed in is longer than the first. This…

  Facebook · HHVM

  High7.5
• CVE-2020-1918

  In-memory file operations (ie: using fopen on a data URI) did not properly restrict negative seeking, allowing for the reading of memory prior to the in-memory…

  Facebook · HHVM

  High7.5