Information Leakage and DoS Vulnerability in HHVM by Facebook

CVE-2020-1892

What is CVE-2020-1892?

The vulnerability in HHVM arises from insufficient boundary checks during the decoding of JSON in the JSON_parser. This flaw allows unauthorized read access to out-of-bounds memory, potentially resulting in information leakage and enabling denial-of-service attacks. The impact is significant, affecting multiple versions of HHVM, as detailed above. Users are encouraged to review the provided references and update to secure their systems.

References