CVE-2019-11926

Published Sep 6, 2019

Last updated 5 years ago

CVSS critical 9.8

Overview

Description: Insufficient boundary checks when processing M_SOFx markers from JPEG headers in the GD extension could allow access to out-of-bounds memory via a maliciously constructed invalid JPEG input. This issue affects HHVM versions prior to 3.30.9, all versions between 4.0.0 and 4.8.3, all versions between 4.9.0 and 4.15.2, and versions 4.16.0 to 4.16.3, 4.17.0 to 4.17.2, 4.18.0 to 4.18.1, 4.19.0, 4.20.0 to 4.20.1.
Source: cve-assign@fb.com
NVD status: Modified

Risk scores

CVSS 3.0

Type: Primary
Base score: 9.8
Impact score: 5.9
Exploitability score: 3.9
Vector string: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity: CRITICAL

CVSS 2.0

Type: Primary
Base score: 7.5
Impact score: 6.4
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:P/I:P/A:P

Weaknesses

nvd@nist.gov: CWE-125
cve-assign@fb.com: CWE-119

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:facebook:hhvm:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "FC8B8512-9465-4BB0-9541-0F97ACCA1427",
            "versionEndIncluding": "3.30.9"
          },
          {
            "criteria": "cpe:2.3:a:facebook:hhvm:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A84F7349-505B-4CBD-96B4-0E1F6D753859",
            "versionEndIncluding": "4.8.3",
            "versionStartIncluding": "4.0.0"
          },
          {
            "criteria": "cpe:2.3:a:facebook:hhvm:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E636BA42-9847-4015-8B50-D810D7D47FB7",
            "versionEndIncluding": "4.15.2",
            "versionStartIncluding": "4.9.0"
          },
          {
            "criteria": "cpe:2.3:a:facebook:hhvm:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "22E2EDC9-EF7D-4EAD-8DE4-560BEBD6AAE8",
            "versionEndIncluding": "4.16.3",
            "versionStartIncluding": "4.16.0"
          },
          {
            "criteria": "cpe:2.3:a:facebook:hhvm:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F58B96DF-AF88-4D3A-98B9-8ED942346A02",
            "versionEndIncluding": "4.17.2",
            "versionStartIncluding": "4.17.0"
          },
          {
            "criteria": "cpe:2.3:a:facebook:hhvm:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "04418D87-68DC-425D-9200-D0EC241171BD",
            "versionEndIncluding": "4.18.1",
            "versionStartIncluding": "4.18.0"
          },
          {
            "criteria": "cpe:2.3:a:facebook:hhvm:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "DEE8D516-10E4-4911-B7ED-FC555C84A312",
            "versionEndIncluding": "4.20.1",
            "versionStartIncluding": "4.20.0"
          },
          {
            "criteria": "cpe:2.3:a:facebook:hhvm:4.19.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "6B376181-2C7E-4411-B2F6-B10F0D15973B"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Risk scores

CVSS 3.0

CVSS 2.0

Weaknesses

Social media

Configurations

References