Skip to content

Known vulnerabilities in Facebook HHVM

Is your version affected?

CVE Summary Score Published
CVE-2018-6345 The function number_format is vulnerable to a heap overflow issue when its second argument ($dec_points) is… Not rated Jan 15, 2019
CVE-2018-6337 folly::secureRandom will re-use a buffer between parent and child processes when fork() is called 7.5 High Dec 31, 2018
CVE-2018-6340 The Memcache::getextendedstats function can be used to trigger an out-of-bounds read 8.1 High Dec 31, 2018
CVE-2018-6335 A Malformed h2 frame can cause 'std::out_of_range' exception when parsing priority meta data 7.5 High Dec 31, 2018
CVE-2018-6334 Multipart-file uploads call variables to be improperly registered in the global scope 9.8 Critical Dec 31, 2018
CVE-2018-6332 A potential denial-of-service issue in the Proxygen handling of invalid HTTP2 settings which can cause the server to… 5.9 Medium Dec 3, 2018

Other Facebook products