CVE-2020-1918CWE-127

In-memory file operations (ie: using fopen on a data URI) did not properly restrict negative seeking, allowing for the reading of memory prior to the in-memory…

published March 10, 2021

CVSS
—
EPSS
1%
Percentile
68.4
In the wild
Unconfirmed
What it is

In-memory file operations (ie: using fopen on a data URI) did not properly restrict negative seeking, allowing for the reading of memory prior to the in-memory buffer. This issue affects HHVM versions prior to 4.56.3, all versions between 4.57.0 and 4.80.1, all versions between 4.81.0 and 4.93.1, and versions 4.94.0, 4.95.0, 4.96.0, 4.97.0, 4.98.0.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01218 · 68.4th percentile
Weakness
CWE-127 · Buffer Under-read
Published
2021-03-10T15:50Z
EPSS history
Timeline
  • 10 MAR 15:50Z
    In-memory file operations (ie: using fopen on a data URI) did not properly restrict negative seeking, allowing for the reading of memory prior to the in-memory…
    cvelistv5