Design/Logic Flaw

2020-03-0315:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

45.6%

JSON

Insufficient boundary checks when decoding JSON in TryParse reads out of bounds memory, potentially leading to DOS. This issue affects HHVM 4.45.0, 4.44.0, 4.43.0, 4.42.0, 4.41.0, 4.40.0, 4.39.0, versions between 4.33.0 and 4.38.0 (inclusive), versions between 4.9.0 and 4.32.0 (inclusive), and versions prior to 4.8.7.

CPENameOperatorVersion
hhvmeq4.44.0
hhvmeq4.43.0
hhvmeq4.42.0
hhvmeq4.41.0
hhvmeq4.40.0
hhvmeq4.39.0
hhvmeq4.45.0
hhvmlt4.8.7
hhvmge4.9.0
hhvmle4.32.0