Advisories · Technology

Facebook HHVM.

Every CVE that names Facebook HHVM among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-36937 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Broken or risky cryptographic algorithm in Facebook HHVM
- Facebook HHVM
- Weak cryptography or TLS
Not analysed yet 10 May 2023
CVE-2019-3556 CVE record

Path traversal in Facebook HHVM
- Facebook HHVM
- Path traversal
Not analysed yet 26 Oct 2021
CVE-2021-24036 CVE record

Heap-based buffer overflow in Facebook folly and others
- Facebook folly
- Facebook HHVM
- Memory corruption
Not analysed yet 23 Jul 2021
CVE-2020-1900 CVE record

Use after free in Facebook HHVM
- Facebook HHVM
- Memory corruption
Not analysed yet 11 Mar 2021
CVE-2020-1899 CVE record

Untrusted pointer dereference in Facebook HHVM
- Facebook HHVM
- Memory corruption
Not analysed yet 11 Mar 2021
CVE-2020-1898 CVE record

Uncontrolled recursion in Facebook HHVM
- Facebook HHVM
- Denial of service
Not analysed yet 11 Mar 2021
CVE-2021-24025 CVE record

Heap-based buffer overflow in Facebook HHVM
- Facebook HHVM
- Memory corruption
Not analysed yet 10 Mar 2021
CVE-2020-1921 CVE record

Stack-based buffer overflow in Facebook HHVM
- Facebook HHVM
- Memory corruption
Not analysed yet 10 Mar 2021
CVE-2020-1919 CVE record

Out-of-bounds read in Facebook HHVM
- Facebook HHVM
- Memory corruption
Not analysed yet 10 Mar 2021
CVE-2020-1918 CVE record

Facebook HHVM: In-memory file operations (ie: using fopen on a data URI) did not properly restrict…
- Facebook HHVM
- CWE-127
Not analysed yet 10 Mar 2021
CVE-2020-1917 CVE record

Heap-based buffer overflow in Facebook HHVM
- Facebook HHVM
- Memory corruption
Not analysed yet 10 Mar 2021
CVE-2020-1916 CVE record

Heap-based buffer overflow in Facebook HHVM
- Facebook HHVM
- Memory corruption
Not analysed yet 10 Mar 2021
CVE-2020-1893 CVE record

Out-of-bounds read in Facebook HHVM
- Facebook HHVM
- Memory corruption
Not analysed yet 3 Mar 2020
CVE-2020-1892 CVE record

Out-of-bounds read in Facebook HHVM
- Facebook HHVM
- Memory corruption
Not analysed yet 3 Mar 2020
CVE-2020-1888 CVE record

Out-of-bounds read in Facebook HHVM
- Facebook HHVM
- Memory corruption
Not analysed yet 3 Mar 2020
CVE-2019-11936 CVE record

Facebook HHVM: Various APC functions accept keys containing null bytes as input…
- Facebook HHVM
- CWE-626
Not analysed yet 4 Dec 2019
CVE-2019-11935 CVE record

Out-of-bounds read in Facebook HHVM
- Facebook HHVM
- Memory corruption
Not analysed yet 4 Dec 2019
CVE-2019-11930 CVE record

Release of invalid pointer in Facebook HHVM
- Facebook HHVM
- Memory corruption
Not analysed yet 4 Dec 2019
CVE-2019-11929 CVE record

Buffer overflow in Facebook HHVM
- Facebook HHVM
- Memory corruption
Not analysed yet 2 Oct 2019
CVE-2019-11926 CVE record

Buffer overflow in Facebook HHVM
- Facebook HHVM
- Memory corruption
Not analysed yet 6 Sept 2019
CVE-2019-11925 CVE record

Buffer overflow in Facebook HHVM
- Facebook HHVM
- Memory corruption
Not analysed yet 6 Sept 2019
CVE-2019-3570 CVE record

Heap-based buffer overflow in Facebook HHVM
- Facebook HHVM
- Memory corruption
Not analysed yet 18 Jul 2019
CVE-2019-3569 CVE record

Files accessible to external parties in Facebook HHVM
- Facebook HHVM
- Information disclosure
Not analysed yet 26 Jun 2019
CVE-2019-3561 CVE record

Buffer overflow in Facebook HHVM
- Facebook HHVM
- Memory corruption
Not analysed yet 29 Apr 2019
CVE-2019-3557 CVE record

Out-of-bounds read in Facebook HHVM
- Facebook HHVM
- Memory corruption
Not analysed yet 15 Jan 2019
CVE-2018-6345 CVE record

Heap-based buffer overflow in Facebook HHVM
- Facebook HHVM
- Memory corruption
Not analysed yet 15 Jan 2019
CVE-2018-6340 CVE record

CVSS 8.1 High

Out-of-bounds read in Facebook HHVM
- Facebook HHVM
- Memory corruption
Not analysed yet 31 Dec 2018
CVE-2018-6337 CVE record

CVSS 7.5 High

folly::secureRandom will re-use a buffer between parent and child processes when fork() is called.
- Facebook HHVM
- Facebook folly
- CWE-212
Not analysed yet 31 Dec 2018
CVE-2018-6335 CVE record

CVSS 7.5 High

Uncontrolled resource consumption in Facebook HHVM
- Facebook HHVM
- Denial of service
Not analysed yet 31 Dec 2018
CVE-2018-6334 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Multipart-file uploads call variables to be improperly registered in the global scope.
- Facebook HHVM
- CWE-621
Not analysed yet 31 Dec 2018
CVE-2018-6332 CVE record

CVSS 5.9 Medium

Uncontrolled resource consumption in Facebook HHVM
- Facebook HHVM
- Denial of service
Not analysed yet 3 Dec 2018