Unrated severityNVD Advisory· Published Dec 4, 2019· Updated Aug 4, 2024

CVE-2019-11930

Description

An invalid free in mb_detect_order can cause the application to crash or potentially result in remote code execution. This issue affects HHVM versions prior to 3.30.12, all versions between 4.0.0 and 4.8.5, all versions between 4.9.0 and 4.23.1, as well as 4.24.0, 4.25.0, 4.26.0, 4.27.0, 4.28.0, and 4.28.1.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Facebook/Hhvmllm-fuzzy2 versions
<3.30.12, >=4.0.0 <=4.8.5, >=4.9.0 <=4.23.1, 4.24.0, 4.25.0, 4.26.0, 4.27.0, 4.28.0, 4.28.1+ 1 more
- (no CPE)range: <3.30.12, >=4.0.0 <=4.8.5, >=4.9.0 <=4.23.1, 4.24.0, 4.25.0, 4.26.0, 4.27.0, 4.28.0, 4.28.1
- (no CPE)range: 4.28.2

Patches

Vulnerability mechanics

References

github.com/facebook/hhvm/commit/524d2e60cfe910406ec6109e4286d7edd545ab36mitrex_refsource_CONFIRM
hhvm.com/blog/2019/10/28/security-update.htmlmitrex_refsource_CONFIRM
www.facebook.com/security/advisories/cve-2019-11930mitrex_refsource_CONFIRM

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000