CVE-2020-1919CWE-125

Incorrect bounds calculations in substr_compare could lead to an out-of-bounds read when the second string argument passed in is longer than the first

published March 10, 2021

CVSS
—
EPSS
1%
Percentile
68.4
In the wild
Unconfirmed
What it is

Incorrect bounds calculations in substr_compare could lead to an out-of-bounds read when the second string argument passed in is longer than the first. This issue affects HHVM versions prior to 4.56.3, all versions between 4.57.0 and 4.80.1, all versions between 4.81.0 and 4.93.1, and versions 4.94.0, 4.95.0, 4.96.0, 4.97.0, 4.98.0.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01218 · 68.4th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2021-03-10T15:50Z
EPSS history
Timeline
  • 10 MAR 15:50Z
    Incorrect bounds calculations in substr_compare could lead to an out-of-bounds read when the second string argument passed in is longer than the first
    cvelistv5