CVE-2018-6345

State: Published
Severity: Not scored
Published: Jan 15, 2019
Updated: Aug 5, 2024
Reserved: Jan 26, 2018

Description

The function number_format is vulnerable to a heap overflow issue when its second argument ($dec_points) is excessively large. The internal implementation of the function will cause a string to be created with an invalid length, which can then interact poorly with other functions. This affects all supported versions of HHVM (3.30.1 and 3.27.5 and below).

Scores

The record has no CVSS score.

Weaknesses

CWE-122 Heap-based Buffer Overflow (CWE-122)

Affected Products

Product	Versions
HHVMFacebook	3.30.2Affected 3.30.0 to before unspecifiedAffected 3.27.6Affected before 3.27.6Affected

References

https://github.com/facebook/hhvm/commit/190ffdf6c8b1ec443be202c7d69e63a7e3da25e3
https://hhvm.com/blog/2019/01/14/hhvm-3.30.2.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.