CVE-2018-6345CWE-122

CVE-2018-6345: falha em Facebook HHVM

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar HHVM

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 1.7%
The function number_format is vulnerable to a heap overflow issue when its second argument ($dec_points) is excessively large. The internal implementation of the function will cause a string to be created with an invalid length, which can then interact poorly with other functions. This affects all supported versions of HHVM (3.30.1 and 3.27.5 and below).
Produtos afetados
Facebook · HHVM
CVEs relacionadas — Facebook HHVM

No mesmo produto, das mais perigosas para as menos.

CVE-2019-11929—CVE-2019-11929EPSS 4.0%CVE-2021-24036—CVE-2021-24036EPSS 3.3%CVE-2019-11930—CVE-2019-11930EPSS 3.2%CVE-2019-11926—CVE-2019-11926EPSS 2.3%CVE-2019-11925—CVE-2019-11925EPSS 2.1%CVE-2018-6334CRITICALCVE-2018-6334EPSS 1.9%