Unrated severityNVD Advisory· Published Jul 23, 2021· Updated Aug 3, 2024

CVE-2021-24036

Description

Passing an attacker controlled size when creating an IOBuf could cause integer overflow, leading to an out of bounds write on the heap with the possibility of remote code execution. This issue affects versions of folly prior to v2021.07.22.00. This issue affects HHVM versions prior to 4.80.5, all versions between 4.81.0 and 4.102.1, all versions between 4.103.0 and 4.113.0, and versions 4.114.0, 4.115.0, 4.116.0, 4.117.0, 4.118.0 and 4.118.1.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Facebook/follyllm-create2 versions
< v2021.07.22.00+ 1 more
- (no CPE)range: < v2021.07.22.00
- (no CPE)range: unspecified
Facebook/Hhvmllm-fuzzy2 versions
< 4.80.5, >=4.81.0 <=4.102.1, >=4.103.0 <=4.113.0, =4.114.0, =4.115.0, =4.116.0, =4.117.0, =4.118.0, =4.118.1+ 1 more
- (no CPE)range: < 4.80.5, >=4.81.0 <=4.102.1, >=4.103.0 <=4.113.0, =4.114.0, =4.115.0, =4.116.0, =4.117.0, =4.118.0, =4.118.1
- (no CPE)range: 4.118.0

Patches

Vulnerability mechanics

References

github.com/facebook/folly/commit/4f304af1411e68851bdd00ef6140e9de4616f7d3mitrex_refsource_MISC
hhvm.com/blog/2021/07/20/security-update.htmlmitrex_refsource_CONFIRM
www.facebook.com/security/advisories/cve-2021-24036mitrex_refsource_CONFIRM

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000