Hhvm
Vendor:
First CVE: Feb 17, 2017 · Active for 9 years
41
Total CVEs
More Total CVEs than 97% of tracked products
6.8
Avg CVEs / Year
Higher CVE frequency than 92% of tracked products
8.9
Avg CVSS
Higher Avg CVSS than 83% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Hhvm over time
Volume of CVEsAvg CVSS Base Score
First CVE
Feb 17, 2017
9 years ago
Most Recent CVE
May 10, 2023
1,171 days ago
CVE Severity & Scoring
Hhvm41 CVEs
32%
63%
All CVEs352,231 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network41 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low39 (95.1%)
High2 (4.9%)
Unknown0 (0.0%)
User Interaction
None40 (97.6%)
Unknown0 (0.0%)
Required1 (2.4%)
Privileges Required
Low1 (2.4%)
High0 (0.0%)
None40 (97.6%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (41 CVEs).
41 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2021-24036CRITICAL Passing an attacker controlled size when creating an IOBuf could cause integer overflow, leading to an out of bounds write on the heap with the possibility of remote code execution | Jul 23, 2021 | 9.8 | 33 | NO | NO |
CVE-2019-11925CRITICAL Insufficient boundary checks when processing the JPEG APP12 block marker in the GD extension could allow access to out-of-bounds memory via a maliciously constructed invalid JPEG i | Sep 6, 2019 | 9.8 | 32 | NO | NO |
CVE-2020-1900CRITICAL When unserializing an object with dynamic properties HHVM needs to pre-reserve the full size of the dynamic property array before inserting anything into it. Otherwise the array mi | Mar 11, 2021 | 9.8 | 31 | NO | NO |
CVE-2021-24025CRITICAL Due to incorrect string size calculations inside the preg_quote function, a large input string passed to the function can trigger an integer overflow leading to a heap overflow. Th | Mar 10, 2021 | 9.8 | 31 | NO | NO |
CVE-2019-11926CRITICAL Insufficient boundary checks when processing M_SOFx markers from JPEG headers in the GD extension could allow access to out-of-bounds memory via a maliciously constructed invalid J | Sep 6, 2019 | 9.8 | 31 | NO | NO |
CVE-2019-3561CRITICAL Insufficient boundary checks for the strrpos and strripos functions allow access to out-of-bounds memory. This affects all supported versions of HHVM (4.0.3, 3.30.4, and 3.27.7 and | Apr 29, 2019 | 9.8 | 31 | NO | NO |
CVE-2018-6345CRITICAL The function number_format is vulnerable to a heap overflow issue when its second argument ($dec_points) is excessively large. The internal implementation of the function will caus | Jan 15, 2019 | 9.8 | 31 | NO | NO |
CVE-2016-6875CRITICAL Infinite recursion in wddx in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors. | Feb 17, 2017 | 9.8 | 31 | NO | NO |
CVE-2016-6874CRITICAL The array_*_recursive functions in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors, related to recursion. | Feb 17, 2017 | 9.8 | 31 | NO | NO |
CVE-2016-1000004CRITICAL Insufficient type checks were employed prior to casting input data in SimpleXMLElement_exportNode and simplexml_import_dom. This issue affects HHVM versions prior to 3.9.5, all ver | Feb 19, 2020 | 9.8 | 30 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (41 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (41 CVEs).
Media Mentions
Signals from CVEs in this product scope (41 CVEs).
Top CNAs Publishing CVEs For Hhvm
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 4.98.0 | 5 | 8.4 | 1.3% | 0 | 0 |
| 4.97.0 | 5 | 8.4 | 1.3% | 0 | 0 |
| 4.96.0 | 5 | 8.4 | 1.3% | 0 | 0 |
| 4.95.0 | 5 | 8.4 | 1.3% | 0 | 0 |
| 4.94.0 | 5 | 8.4 | 1.3% | 0 | 0 |
| 4.83.0 | 2 | 8.9 | 1.6% | 0 | 0 |
| 4.82.0 | 2 | 8.9 | 1.6% | 0 | 0 |
| 4.81.0 | 2 | 8.9 | 1.6% | 0 | 0 |
| 4.80.0 | 2 | 8.9 | 1.6% | 0 | 0 |
| 4.8.0 | 1 | 7.5 | 1.5% | 0 | 0 |
| 4.79.0 | 2 | 8.9 | 1.6% | 0 | 0 |
| 4.7.0 | 1 | 7.5 | 1.5% | 0 | 0 |
| 4.62.0 | 3 | 8.3 | 1.3% | 0 | 0 |
| 4.61.0 | 3 | 8.3 | 1.3% | 0 | 0 |
| 4.60.0 | 3 | 8.3 | 1.3% | 0 | 0 |
| 4.6.0 | 1 | 7.5 | 1.5% | 0 | 0 |
| 4.59.0 | 3 | 8.3 | 1.3% | 0 | 0 |
| 4.58.1 | 3 | 8.3 | 1.3% | 0 | 0 |
| 4.58.0 | 3 | 8.3 | 1.3% | 0 | 0 |
| 4.57.0 | 3 | 8.3 | 1.3% | 0 | 0 |