Integer Overflow Vulnerability in Facebook HipHop Virtual Machine
CVE-2014-6228

Currently unrated

Key Information:

Vendor

Facebook

Status
Hiphop Virtual Machine
Vendor
CVE Published:
28 December 2014

What is CVE-2014-6228?

An integer overflow vulnerability exists in the string_chunk_split function within Facebook's HipHop Virtual Machine (HHVM) prior to version 3.3.0. Remote attackers can exploit this flaw by sending specially crafted arguments to the chunk_split function, potentially leading to a denial of service condition, resulting in application crashes or causing other unforeseen impacts on system operations.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://github.com/facebook/hhvm/commit/1f91e076a58511849...
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.