Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Facebook HHVM unspecified Clear all filters
TI-2019-08931 CVE-2019-11926 · GHSA-rjfc-697q-4r5p

Memory corruption in Meta HHVM

Priority MEDIUM 46

Insufficient boundary checks when processing M_SOFx markers from JPEG headers in the GD extension could allow access to out-of-bounds memory via a maliciously constructed invalid JPEG input.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.0229 Published 2019-09-06 No fix listed CWE-119
TI-2019-08930 CVE-2019-11925 · GHSA-xm5g-27h5-6568

Memory corruption in Meta HHVM

Priority MEDIUM 46

Insufficient boundary checks when processing the JPEG APP12 block marker in the GD extension could allow access to out-of-bounds memory via a maliciously constructed invalid JPEG input.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02084 Published 2019-09-06 No fix listed CWE-119