Description (CNA)
The unserialize() function supported a type code, "S", which was meant to be supported only for APC serialization. This type code allowed arbitrary memory addresses to be accessed as if they were static StringData objects. This issue affected HHVM prior to v4.32.3, between versions 4.33.0 and 4.56.0, 4.57.0, 4.58.0, 4.58.1, 4.59.0, 4.60.0, 4.61.0, 4.62.0.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Facebook / HHVM | unaffected 4.62.1 before unspecified; affected 4.62.0; unaffected 4.61.1 before unspecified; affected 4.61.0; unaffected 4.60.1 before unspecified; affected 4.60.0; unaffected 4.59.1 before unspecified; affected 4.59.0; unaffected 4.58.2 before unspecified; affected 4.58.0 before unspecified; unaffected 4.57.1 before unspecified; affected 4.57.0; unaffected 4.56.1 before unspecified; affected 4.33.0 before unspecified; unaffected 4.32.3 before unspecified; affected unspecified before 4.32.3 |
CWE
CWE-822
References
- https://hhvm.com/blog/2020/06/30/security-update.html
- https://github.com/facebook/hhvm/commit/1107228a5128d3ca1c4add8ac1635d933cbbe2e9
ADP enrichment
No English description supplied.