Riskcovery

CVE-2021-24036

State
Published
Severity
Not scored
Published
Jul 23, 2021
Updated
Aug 3, 2024
Reserved
Jan 13, 2021

Read the record on cve.org

Description

Passing an attacker controlled size when creating an IOBuf could cause integer overflow, leading to an out of bounds write on the heap with the possibility of remote code execution. This issue affects versions of folly prior to v2021.07.22.00. This issue affects HHVM versions prior to 4.80.5, all versions between 4.81.0 and 4.102.1, all versions between 4.103.0 and 4.113.0, and versions 4.114.0, 4.115.0, 4.116.0, 4.117.0, 4.118.0 and 4.118.1.

Scores

The record has no CVSS score.

Weaknesses

  • CWE-122 Heap-based Buffer Overflow (CWE-122)

Affected Products

ProductVersions
follyFacebook
  • v2021.07.22.00 to before unspecifiedNot affected
  • before v2021.07.22.00Affected
HHVMFacebook
  • 4.118.2 to before unspecifiedNot affected
  • 4.118.0 to before unspecifiedAffected
  • 4.117.1 to before unspecifiedNot affected
  • 4.117.0Affected
  • 4.116.1 to before unspecifiedNot affected
  • 4.116.0Affected
  • 4.115.1 to before unspecifiedNot affected
  • 4.115.0Affected
  • 4.114.1 to before unspecifiedNot affected
  • 4.114.0Affected
  • 4.113.1 to before unspecifiedNot affected
  • 4.113.0Affected
  • 4.102.2 to before unspecifiedNot affected
  • 4.102.0 to before unspecifiedAffected
  • 4.81.0 to before unspecifiedAffected
  • 4.80.5 to before unspecifiedNot affected
  • before 4.80.5Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.