CVE-2020-1893

2020-03-0315:00:26

CWE-125

facebook

www.cve.org

7.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.6%

JSON

Insufficient boundary checks when decoding JSON in TryParse reads out of bounds memory, potentially leading to DOS. This issue affects HHVM 4.45.0, 4.44.0, 4.43.0, 4.42.0, 4.41.0, 4.40.0, 4.39.0, versions between 4.33.0 and 4.38.0 (inclusive), versions between 4.9.0 and 4.32.0 (inclusive), and versions prior to 4.8.7.

CNA Affected

[
  {
    "product": "HHVM",
    "vendor": "Facebook",
    "versions": [
      {
        "status": "affected",
        "version": "4.45.1"
      },
      {
        "status": "affected",
        "version": "4.45.0"
      },
      {
        "status": "affected",
        "version": "4.44.1"
      },
      {
        "status": "affected",
        "version": "4.44.0"
      },
      {
        "status": "affected",
        "version": "4.43.1"
      },
      {
        "status": "affected",
        "version": "4.43.0"
      },
      {
        "status": "affected",
        "version": "4.42.1"
      },
      {
        "status": "affected",
        "version": "4.42.0"
      },
      {
        "status": "affected",
        "version": "4.41.1"
      },
      {
        "status": "affected",
        "version": "4.41.0"
      },
      {
        "status": "affected",
        "version": "4.40.1"
      },
      {
        "status": "affected",
        "version": "4.40.0"
      },
      {
        "status": "affected",
        "version": "4.39.1"
      },
      {
        "status": "affected",
        "version": "4.39.0"
      },
      {
        "status": "affected",
        "version": "4.38.1"
      },
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "4.33.0",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "4.32.1"
      },
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "4.9.0",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "4.8.7"
      },
      {
        "lessThanOrEqual": "4.8.6",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]