Common vulnerabilities and Exposures (CVE)

Skip to main content

Required CVE Record Information

Description

Insufficient boundary checks when decoding JSON in TryParse reads out of bounds memory, potentially leading to DOS. This issue affects HHVM 4.45.0, 4.44.0, 4.43.0, 4.42.0, 4.41.0, 4.40.0, 4.39.0, versions between 4.33.0 and 4.38.0 (inclusive), versions between 4.9.0 and 4.32.0 (inclusive), and versions prior to 4.8.7.

Product Status

Learn more

Versions 20 Total

Default Status: unknown

affected

  • affected at 4.45.1 
  • affected at 4.45.0 
  • affected at 4.44.1 
  • affected at 4.44.0 
  • affected at 4.43.1 
  • affected at 4.43.0 
  • affected at 4.42.1 
  • affected at 4.42.0 
  • affected at 4.41.1 
  • affected at 4.41.0 
  • affected at 4.40.1 
  • affected at 4.40.0 
  • affected at 4.39.1 
  • affected at 4.39.0 
  • affected at 4.38.1 
  • affected from 4.33.0 
  • affected at 4.32.1 
  • affected from 4.9.0 
  • affected at 4.8.7 
  • affected through 4.8.6 

Updated:

This container includes required additional information provided by the CVE Program for this vulnerability.