CVE-2021-24036

CVE-2021-24036 describes an integer overflow vulnerability in Facebook's Folly library and HHVM, where an attacker-controlled size during IOBuf creation can lead to an out-of-bounds write and potential remote code execution. This critical vulnerability has a CVSS score of 9.8, indicating it is easily exploitable over the network with no user interaction, resulting in high impact to confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion, suggesting awareness among security researchers. It is not listed on CISA's KEV catalog.