CVE-2016-6871 Integer overflow in bcmath in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors, which triggers a buffer overflow.
CriticalCVSS 9.8
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer overflow in bcmath in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors, which triggers a buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| facebook hhvm | <= 3.14.5 | No fix listed |
References
- [oss-security] 20160811 CVE Requests Facebook HHVM mailing-list patch third-party-advisory
- [oss-security] 20160818 Re: CVE Requests Facebook HHVM mailing-list patch third-party-advisory
- github.com patch