Skip to content
OpenAdvisories
Unscored CVE-2020-1917 EUVD-2020-12738GHSA-gf82-22g8-prc5

xbuf_format_converter, used as part of exif_read_data, was appending a terminating null character to the generated string, but was not usin…

Published Mar 10, 2021 · Updated Aug 4, 2024 · Assigned by facebook

Description

xbuf_format_converter, used as part of exif_read_data, was appending a terminating null character to the generated string, but was not using its standard append char function. As a result, if the buffer was full, it would result in an out-of-bounds write. This issue affects HHVM versions prior to 4.56.3, all versions between 4.57.0 and 4.80.1, all versions between 4.81.0 and 4.93.1, and versions 4.94.0, 4.95.0, 4.96.0, 4.97.0, 4.98.0.

Affected products

VendorProductAffectedFixed
Facebook HHVM 4.98.0, 4.97.0, 4.96.0, 4.95.0, 4.94.0, 4.81.0 – < unspecified, 4.57.0 – < unspecified, unspecified – < 4.56.3 unspecified

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Ubuntu 18.04 LTS hhvm No fix yet —
Ubuntu 16.04 LTS hhvm No fix yet —

References