CVE-2019-3561
N/A
Published: April 29, 2019 at 03:32 PM UTC
Updated: June 17, 2026 at 02:35 AM UTC
1 product affected across 1 vendorHHVM
Using HHVM by Facebook?
Get instant alerts when new vulnerabilities affect HHVM - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 2%
Description
Insufficient boundary checks for the strrpos and strripos functions allow access to out-of-bounds memory. This affects all supported versions of HHVM (4.0.3, 3.30.4, and 3.27.7 and below).
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
References (2)
x_refsource_MISCThird Party Advisory
Source: [email protected]
https://github.com/facebook/hhvm/commit/46003b4ab564b2abcd8470035fc324fe36aa8c75x_refsource_MISCVendor Advisory
Source: [email protected]
https://hhvm.com/blog/2019/04/03/hhvm-4.0.4.htmlQuick Info
StatusMODIFIED
CWE
CWE-119CWE-125
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card