Due to incorrect string size calculations inside the preg_quote function, a large input string passed to the function can trigger an integer overflow leading to a heap overflow. This issue affects HHVM versions prior to 4.56.3, all versions between 4.57.0 and 4.80.1, all versions between 4.81.0 and 4.93.1, and versions 4.94.0, 4.95.0, 4.96.0, 4.97.0, 4.98.0.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HFacebook Hhvm
APPFacebook4.94.04.95.04.96.04.97.04.98.04.81.0 – 4.93.14.57.0 – 4.80.1< 4.56.3
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
Memory
Related vulnerabilities
CVE-2022-36937CRITICAL9.8PL ✓same product
HHVM: użycie przestarzałego protokołu TLS 1.0 zamiast TLS 1.3
CVE-2021-24036CRITICAL9.8PL ✓same product
RCE poprzez integer overflow w IOBuf w Facebook Folly i HHVM
CVE-2020-1900CRITICAL9.8PL ✓same product
Use-after-free w Facebook HHVM podczas deserializacji obiektów z dynamicznymi właściwościami
CVE-2020-1916CRITICAL9.8PL ✓same product
Integer overflow i out-of-bounds write w funkcji ldap_escape HHVM
CVE-2020-1917CRITICAL9.8PL ✓same product
Out-of-bounds write w HHVM podczas przetwarzania danych EXIF