Unrated severityNVD Advisory· Published Oct 2, 2019· Updated Aug 4, 2024

CVE-2019-11929

Description

Insufficient boundary checks when formatting numbers in number_format allows read/write access to out-of-bounds memory, potentially leading to remote code execution. This issue affects HHVM versions prior to 3.30.10, all versions between 4.0.0 and 4.8.5, all versions between 4.9.0 and 4.18.2, and versions 4.19.0, 4.19.1, 4.20.0, 4.20.1, 4.20.2, 4.21.0, 4.22.0, 4.23.0.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Facebook/Hhvmllm-fuzzy2 versions
<3.30.10, >=4.0.0 <=4.8.5, >=4.9.0 <=4.18.2, 4.19.0, 4.19.1, 4.20.0, 4.20.1, 4.20.2, 4.21.0, 4.22.0, 4.23.0+ 1 more
- (no CPE)range: <3.30.10, >=4.0.0 <=4.8.5, >=4.9.0 <=4.18.2, 4.19.0, 4.19.1, 4.20.0, 4.20.1, 4.20.2, 4.21.0, 4.22.0, 4.23.0
- (no CPE)range: 4.24.0

Patches

Vulnerability mechanics

References

github.com/facebook/hhvm/commit/dbeb9a56a638e3fdcef8b691c2a2967132dae692mitrex_refsource_CONFIRM
hhvm.com/blog/2019/09/25/security-update.htmlmitrex_refsource_CONFIRM
www.facebook.com/security/advisories/cve-2019-11929mitrex_refsource_CONFIRM

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000