CVE-2020-1918

CVE-2020-1918 describes a vulnerability in HHVM (HipHop Virtual Machine) versions prior to 4.56.3, and various versions up to 4.98.0. This flaw allows for out-of-bounds read operations due to improper restriction of negative seeking during in-memory file operations, specifically when using fopen on a data URI. The vulnerability has a CVSS score of 7.5 (High), indicating a high potential for impact, as an unauthenticated attacker can remotely exploit it with low attack complexity to achieve high confidentiality impact by reading memory outside of the intended buffer. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.