VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Mar 10, 2021· Updated Jun 17, 2026

CVE-2020-1916

CVE-2020-1916

Description

An incorrect size calculation in ldap_escape may lead to an integer overflow when overly long input is passed in, resulting in an out-of-bounds write. This issue affects HHVM prior to 4.56.2, all versions between 4.57.0 and 4.78.0, 4.79.0, 4.80.0, 4.81.0, 4.82.0, 4.83.0.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

8
  • Facebook/Hhvm7 versions
    cpe:2.3:a:facebook:hhvm:*:*:*:*:*:*:*:*+ 6 more
    • cpe:2.3:a:facebook:hhvm:*:*:*:*:*:*:*:*range: <4.56.2
    • cpe:2.3:a:facebook:hhvm:4.79.0:*:*:*:*:*:*:*
    • cpe:2.3:a:facebook:hhvm:4.80.0:*:*:*:*:*:*:*
    • cpe:2.3:a:facebook:hhvm:4.81.0:*:*:*:*:*:*:*
    • cpe:2.3:a:facebook:hhvm:4.82.0:*:*:*:*:*:*:*
    • cpe:2.3:a:facebook:hhvm:4.83.0:*:*:*:*:*:*:*
    • (no CPE)range: 4.83.0
  • HHVM/HHVMllm-fuzzy
    Range: <4.56.2, 4.57.0-4.78.0, 4.79.0, 4.80.0, 4.81.0, 4.82.0, 4.83.0

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.