NetSight
high7.5

CVE-2020-1893

Insufficient boundary checks when decoding JSON in TryParse reads out of bounds memory, potentially leading to DOS.

Impact

Insufficient boundary checks when decoding JSON in TryParse reads out of bounds memory, potentially leading to DOS. This issue affects HHVM 4.45.0, 4.44.0, 4.43.0, 4.42.0, 4.41.0, 4.40.0, 4.39.0, versions between 4.33.0 and 4.38.0 (inclusive), versions between 4.9.0 and 4.32.0 (inclusive), and versions prior to 4.8.7.

Affected products

VendorProductAffected versions
FacebookHhvm
before 4.8.7
from 4.9.0 through 4.32.0
from 4.33.0 through 4.38.0
Versions 4.39.0, 4.40.0, 4.41.0

Weakness classification

References