CVE-2016-6870 Out-of-bounds write in the (1) mb_detect_encoding, (2) mb_send_mail, and (3) mb_detect_order functions in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors.
CriticalCVSS 9.8
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Out-of-bounds write in the (1) mb_detect_encoding, (2) mb_send_mail, and (3) mb_detect_order functions in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| facebook hhvm | <= 3.14.5 | No fix listed |
References
- [oss-security] 20160811 CVE Requests Facebook HHVM mailing-list patch third-party-advisory
- [oss-security] 20160818 Re: CVE Requests Facebook HHVM mailing-list patch third-party-advisory
- github.com patch vendor-advisory