| CVE-2022-36937 |
HHVM 4.172.0 and all prior versions use TLS 1.0 for secure connections when handling tls:// URLs in the stream extension
|
9.8
Critical
|
May 10, 2023 |
| CVE-2019-3556 |
HHVM supports the use of an "admin" server which accepts administrative requests over HTTP
|
Not rated
|
Oct 26, 2021 |
| CVE-2021-24036 |
Passing an attacker controlled size when creating an IOBuf could cause integer overflow, leading to an out of bounds…
|
Not rated
|
Jul 23, 2021 |
| CVE-2020-1900 |
When unserializing an object with dynamic properties HHVM needs to pre-reserve the full size of the dynamic property…
|
Not rated
|
Mar 11, 2021 |
| CVE-2020-1899 |
The unserialize() function supported a type code, "S", which was meant to be supported only for APC serialization
|
Not rated
|
Mar 11, 2021 |
| CVE-2020-1898 |
The fb_unserialize function did not impose a depth limit for nested deserialization
|
Not rated
|
Mar 11, 2021 |
| CVE-2021-24025 |
Due to incorrect string size calculations inside the preg_quote function, a large input string passed to the function…
|
Not rated
|
Mar 10, 2021 |
| CVE-2020-1921 |
In the crypt function, we attempt to null terminate a buffer using the size of the input salt without validating that…
|
Not rated
|
Mar 10, 2021 |
| CVE-2020-1919 |
Incorrect bounds calculations in substr_compare could lead to an out-of-bounds read when the second string argument…
|
Not rated
|
Mar 10, 2021 |
| CVE-2020-1918 |
In-memory file operations (ie: using fopen on a data URI) did not properly restrict negative seeking, allowing for the…
|
Not rated
|
Mar 10, 2021 |
| CVE-2020-1917 |
xbuf_format_converter, used as part of exif_read_data, was appending a terminating null character to the generated…
|
Not rated
|
Mar 10, 2021 |
| CVE-2020-1916 |
An incorrect size calculation in ldap_escape may lead to an integer overflow when overly long input is passed in,…
|
Not rated
|
Mar 10, 2021 |
| CVE-2020-1893 |
Insufficient boundary checks when decoding JSON in TryParse reads out of bounds memory, potentially leading to DOS
|
Not rated
|
Mar 3, 2020 |
| CVE-2020-1892 |
Insufficient boundary checks when decoding JSON in JSON_parser allows read access to out of bounds memory, potentially…
|
Not rated
|
Mar 3, 2020 |
| CVE-2020-1888 |
Insufficient boundary checks when decoding JSON in handleBackslash reads out of bounds memory, potentially leading to…
|
Not rated
|
Mar 3, 2020 |
| CVE-2019-11936 |
Various APC functions accept keys containing null bytes as input, leading to premature truncation of input
|
Not rated
|
Dec 4, 2019 |
| CVE-2019-11935 |
Insufficient boundary checks when processing a string in mb_ereg_replace allows access to out-of-bounds memory
|
Not rated
|
Dec 4, 2019 |
| CVE-2019-11930 |
An invalid free in mb_detect_order can cause the application to crash or potentially result in remote code execution
|
Not rated
|
Dec 4, 2019 |
| CVE-2019-11929 |
Insufficient boundary checks when formatting numbers in number_format allows read/write access to out-of-bounds…
|
Not rated
|
Oct 2, 2019 |
| CVE-2019-11926 |
Insufficient boundary checks when processing M_SOFx markers from JPEG headers in the GD extension could allow access…
|
Not rated
|
Sep 6, 2019 |
| CVE-2019-11925 |
Insufficient boundary checks when processing the JPEG APP12 block marker in the GD extension could allow access to…
|
Not rated
|
Sep 6, 2019 |
| CVE-2019-3570 |
Call to the scrypt_enc() function in HHVM can lead to heap corruption by using specifically crafted parameters (N, r and…
|
Not rated
|
Jul 18, 2019 |
| CVE-2019-3569 |
HHVM, when used with FastCGI, would bind by default to all available interfaces
|
Not rated
|
Jun 26, 2019 |
| CVE-2019-3561 |
Insufficient boundary checks for the strrpos and strripos functions allow access to out-of-bounds memory
|
Not rated
|
Apr 29, 2019 |
| CVE-2019-3557 |
The implementations of streams for bz2 and php://output improperly implemented their readImpl functions, returning -1…
|
Not rated
|
Jan 15, 2019 |