574 matches found
CVE-2026-119723
When parsing request variables such as query-string and form parameters, HHVM did not check that appending a nested array succeeded before descending into it. A remote, unauthenticated attacker could send a GET or POST request which would crash the HHVM server process before any application code...
CVE-2026-119723
When parsing request variables such as query-string and form parameters, HHVM did not check that appending a nested array succeeded before descending into it. A remote, unauthenticated attacker could send a GET or POST request which would crash the HHVM server process before any application code...
CVE-2026-119723
HHVM versions prior to 23c061f4e804a51badd5f85227e65185651253b5 are vulnerable to a denial of service flaw during request variable parsing. The root cause is that the system fails to verify if appending a nested array succeeded before attempting to descend into it when processing query-string or ...
EUVD-2026-123609
When parsing request variables such as query-string and form parameters, HHVM did not check that appending a nested array succeeded before descending into it. A remote, unauthenticated attacker could send a GET or POST request which would crash the HHVM server process before any application code...
CVE-2026-119723
When parsing request variables such as query-string and form parameters, HHVM did not check that appending a nested array succeeded before descending into it. A remote, unauthenticated attacker could send a GET or POST request which would crash the HHVM server process before any application code...
PT-2026-145273
When parsing request variables such as query-string and form parameters, HHVM did not check that appending a nested array succeeded before descending into it. A remote, unauthenticated attacker could send a GET or POST request which would crash the HHVM server process before any application code...
CVE-2026-119723: Facebook HHVM: When parsing request variables such as query-string and form parameters, HHVM did not check that appending a nested…
When parsing request variables such as query-string and form parameters, HHVM did not check that appending a nested array succeeded before descending into it. A remote, unauthenticated attacker could send a GET or POST request which would crash the HHVM server process before any application code...
MINI-2872-4MHM-HHVM
Bulletin has no description...
MINI-4F36-VC26-HHVM
Bulletin has no description...
MINI-P934-HHVM-F2HQ
Bulletin has no description...
GHSA-WPXJ-VHFP-HHVM
creationtimestamp| type| source ---|---|--- 2026-03-26 21:36:49+00:00| seen| Telegram/knkV6U7RC4OpKxR0GhJKoJS2C9ZLnhn5rNmC0CAguDvjk...
CGA-FX75-HHVM-M848
Bulletin has no description...
CVE-2019-11925
Insufficient boundary checks when processing the JPEG APP12 block marker in the GD extension could allow access to out-of-bounds memory via a maliciously constructed invalid JPEG input. This issue affects HHVM versions prior to 3.30.9, all versions between 4.0.0 and 4.8.3, all versions between...
CVE-2019-11930
An invalid free in mbdetectorder can cause the application to crash or potentially result in remote code execution. This issue affects HHVM versions prior to 3.30.12, all versions between 4.0.0 and 4.8.5, all versions between 4.9.0 and 4.23.1, as well as 4.24.0, 4.25.0, 4.26.0, 4.27.0, 4.28.0, an...
CVE-2019-11929
Insufficient boundary checks when formatting numbers in numberformat allows read/write access to out-of-bounds memory, potentially leading to remote code execution. This issue affects HHVM versions prior to 3.30.10, all versions between 4.0.0 and 4.8.5, all versions between 4.9.0 and 4.18.2, and...
EUVD-2020-12738
Malware in sbrugna...
EUVD-2019-3584
Malware in sbrugna...
EUVD-2020-12739
Malware in sbrugna...