CVE-2020-1919CWE-125

CVE-2020-1919: vulnerability in Facebook HHVM

Published · Updated

Follow this CVE+ Monitor HHVM

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.2%
Incorrect bounds calculations in substr_compare could lead to an out-of-bounds read when the second string argument passed in is longer than the first. This issue affects HHVM versions prior to 4.56.3, all versions between 4.57.0 and 4.80.1, all versions between 4.81.0 and 4.93.1, and versions 4.94.0, 4.95.0, 4.96.0, 4.97.0, 4.98.0.
Affected products
Facebook · HHVM
Related CVEs — Facebook HHVM

In the same product, most dangerous first.

CVE-2019-11929—CVE-2019-11929EPSS 4.0%CVE-2021-24036—CVE-2021-24036EPSS 3.3%CVE-2019-11930—CVE-2019-11930EPSS 3.2%CVE-2019-11926—CVE-2019-11926EPSS 2.3%CVE-2019-11925—CVE-2019-11925EPSS 2.1%CVE-2018-6334CRITICALCVE-2018-6334EPSS 1.9%