NetSight
critical9.8

CVE-2019-3561

Insufficient boundary checks for the strrpos and strripos functions allow access to out-of-bounds memory.

Impact

Insufficient boundary checks for the strrpos and strripos functions allow access to out-of-bounds memory. This affects all supported versions of HHVM (4.0.3, 3.30.4, and 3.27.7 and below).

Affected products

VendorProductAffected versions
FacebookHhvm
through 3.27.7
from 3.28.0 through 3.30.4
from 4.0.0 through 4.0.3

Weakness classification

References