Unrated severityNVD Advisory· Published Dec 4, 2019· Updated Aug 4, 2024

CVE-2019-11936

Description

Various APC functions accept keys containing null bytes as input, leading to premature truncation of input. This issue affects HHVM versions prior to 3.30.12, all versions between 4.0.0 and 4.8.5, all versions between 4.9.0 and 4.23.1, as well as 4.24.0, 4.25.0, 4.26.0, 4.27.0, 4.28.0, and 4.28.1.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Facebook/Hhvmllm-fuzzy2 versions
<3.30.12, >=4.0.0 <=4.8.5, >=4.9.0 <=4.23.1, 4.24.0, 4.25.0, 4.26.0, 4.27.0, 4.28.0, 4.28.1+ 1 more
- (no CPE)range: <3.30.12, >=4.0.0 <=4.8.5, >=4.9.0 <=4.23.1, 4.24.0, 4.25.0, 4.26.0, 4.27.0, 4.28.0, 4.28.1
- (no CPE)range: 4.28.2

Patches

Vulnerability mechanics

References

github.com/facebook/hhvm/commit/f57df6d8cf33cb14c40f52287da29360e7003373mitrex_refsource_CONFIRM
hhvm.com/blog/2019/10/28/security-update.htmlmitrex_refsource_CONFIRM
www.facebook.com/security/advisories/cve-2019-11936mitrex_refsource_CONFIRM

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000