Beveiligingsadvies

CVE-2019-11929

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2019-10-02 19:07:18
Laatst bijgewerkt 2024-08-04 23:10:29
Toegewezen door facebook
CVSS-score geen score
Status PUBLISHED

Beschrijving

Insufficient boundary checks when formatting numbers in number_format allows read/write access to out-of-bounds memory, potentially leading to remote code execution. This issue affects HHVM versions prior to 3.30.10, all versions between 4.0.0 and 4.8.5, all versions between 4.9.0 and 4.18.2, and versions 4.19.0, 4.19.1, 4.20.0, 4.20.1, 4.20.2, 4.21.0, 4.22.0, 4.23.0.