Dynamic Property Array Vulnerability in HHVM by Facebook
CVE-2020-1900

9.8CRITICAL

Key Information:

Vendor

Facebook

Status
Hhvm
Vendor
CVE Published:
11 March 2021

What is CVE-2020-1900?

This vulnerability in HHVM results from the failure to pre-reserve the full size of the dynamic property array during unserialization of objects with dynamic properties. When this pre-reservation does not occur, the array may resize unexpectedly, leading to the invalidation of previously stored references. Such behavior could potentially allow an attacker to exploit this flaw and manipulate application logic or exposure of sensitive data. Users are advised to update to versions that address this issue to ensure robust security.

Affected Version(s)

HHVM 4.62.0

HHVM 4.61.0

HHVM 4.60.0

References

https://hhvm.com/blog/2020/06/30/security-update.html
x_refsource_CONFIRM
https://github.com/facebook/hhvm/commit/c1c4bb0cf9e076aaf...
x_refsource_MISC

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.