EUVD-2020-12740

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Incorrect bounds in substr_compare may cause out-of-bounds reads in specific HHVM versions.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2020-1919	10 Mar 202118:53	–	circl
CNNVD	Katy Voor HHVM 缓冲区错误漏洞	10 Mar 202100:00	–	cnnvd
CVE	CVE-2020-1919	10 Mar 202115:50	–	cve
Cvelist	CVE-2020-1919	10 Mar 202115:50	–	cvelist
NVD	CVE-2020-1919	10 Mar 202116:15	–	nvd
OSV	UBUNTU-CVE-2020-1919	10 Mar 202116:15	–	osv
Prion	Out-of-bounds	10 Mar 202116:15	–	prion
RedhatCVE	CVE-2020-1919	22 May 202515:17	–	redhatcve
UbuntuCve	CVE-2020-1919	10 Mar 202116:15	–	ubuntucve
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2020-1919	10 Sep 202500:00	–	nessus

[
  {
    "enisaIdVendor": [
      {
        "id": "cb6c2d57-cc7b-3d0e-9925-f4b3a3c3b2ae",
        "vendor": {
          "name": "Facebook"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "1814feaf-72d1-3cbe-832f-bf402a7468d4",
        "product": {
          "name": "HHVM"
        },
        "product_version": "4.97.0"
      },
      {
        "id": "49d89a2f-9530-3177-a127-cf9d0a727a72",
        "product": {
          "name": "HHVM"
        },
        "product_version": "4.57.0 <unspecified"
      },
      {
        "id": "7a3a36aa-5d55-369f-adda-86bdfb9abfcf",
        "product": {
          "name": "HHVM"
        },
        "product_version": "4.81.0 <unspecified"
      },
      {
        "id": "afe334a8-ee3b-3504-94a1-3027b01367ec",
        "product": {
          "name": "HHVM"
        },
        "product_version": "4.96.0"
      },
      {
        "id": "b8214e75-9442-3678-a70b-6a29a21df34c",
        "product": {
          "name": "HHVM"
        },
        "product_version": "unspecified <4.56.3"
      },
      {
        "id": "b8ec1b3e-0e67-324b-b569-8ccb9bbcc41a",
        "product": {
          "name": "HHVM"
        },
        "product_version": "4.98.0"
      },
      {
        "id": "d5570b05-f213-3c52-98f0-d48b8c90ce24",
        "product": {
          "name": "HHVM"
        },
        "product_version": "4.94.0"
      },
      {
        "id": "ec3fdc54-f1c5-3ed8-9ccc-7648e906cc3f",
        "product": {
          "name": "HHVM"
        },
        "product_version": "4.95.0"
      }
    ]
  }
]

Source	Link
hhvm	www.hhvm.com/blog/2021/02/25/security-update.html
github	www.github.com/facebook/hhvm/commit/08193b7f0cd3910256e00d599f0f3eb2519c44ca
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

7.5High risk

Vulners AI Score7.5

CVSS 3.17.5

CVSS 25

EPSS0.00361