CVE-2020-1917
Estado: ModificadaCrítica (9.8)—
xbuf_format_converter, used as part of exif_read_data, was appending a terminating null character to the generated string, but was not using its standard append char function. As a result, if the buffer was full, it would result in an out-of-bounds write. This issue affects HHVM versions prior to 4.56.3, all versions between 4.57.0 and 4.80.1, all versions between 4.81.0 and 4.93.1, and versions 4.94.0, 4.95.0, 4.96.0, 4.97.0, 4.98.0.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Puntuación base: 9.8
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 1.38%
- Percentil entre todas las CVEs puntuadas: 71
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- CWE-122
- CWE-787
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2020-1917",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 7.5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 6.4,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 9.8,
"attackVector": "NETWORK",
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 3.9
}
]
},
"affected": [
{
"source": "cve-assign@fb.com",
"affectedData": [
{
"vendor": "Facebook",
"product": "HHVM",
"versions": [
{
"status": "unaffected",
"version": "4.98.1",
"lessThan": "unspecified",
"versionType": "custom"
},
{
"status": "affected",
"version": "4.98.0"
},
{
"status": "unaffected",
"version": "4.97.1",
"lessThan": "unspecified",
"versionType": "custom"
},
{
"status": "affected",
"version": "4.97.0"
},
{
"status": "unaffected",
"version": "4.96.1",
"lessThan": "unspecified",
"versionType": "custom"
},
{
"status": "affected",
"version": "4.96.0"
},
{
"status": "unaffected",
"version": "4.95.1",
"lessThan": "unspecified",
"versionType": "custom"
},
{
"status": "affected",
"version": "4.95.0"
},
{
"status": "unaffected",
"version": "4.94.1",
"lessThan": "unspecified",
"versionType": "custom"
},
{
"status": "affected",
"version": "4.94.0"
},
{
"status": "unaffected",
"version": "4.93.2",
"lessThan": "unspecified",
"versionType": "custom"
},
{
"status": "affected",
"version": "4.81.0",
"lessThan": "unspecified",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "4.80.2",
"lessThan": "unspecified",
"versionType": "custom"
},
{
"status": "affected",
"version": "4.57.0",
"lessThan": "unspecified",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "4.56.3",
"lessThan": "unspecified",
"versionType": "custom"
},
{
"status": "affected",
"version": "unspecified",
"lessThan": "4.56.3",
"versionType": "custom"
}
]
}
]
}
],
"published": "2021-03-10T16:15:14.313",
"references": [
{
"url": "https://github.com/facebook/hhvm/commit/08193b7f0cd3910256e00d599f0f3eb2519c44ca",
"tags": [
"Patch",
"Third Party Advisory"
],
"source": "cve-assign@fb.com"
},
{
"url": "https://hhvm.com/blog/2021/02/25/security-update.html",
"tags": [
"Release Notes",
"Vendor Advisory"
],
"source": "cve-assign@fb.com"
},
{
"url": "https://github.com/facebook/hhvm/commit/08193b7f0cd3910256e00d599f0f3eb2519c44ca",
"tags": [
"Patch",
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://hhvm.com/blog/2021/02/25/security-update.html",
"tags": [
"Release Notes",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Secondary",
"source": "cve-assign@fb.com",
"description": [
{
"lang": "en",
"value": "CWE-122"
}
]
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-787"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "xbuf_format_converter, used as part of exif_read_data, was appending a terminating null character to the generated string, but was not using its standard append char function. As a result, if the buffer was full, it would result in an out-of-bounds write. This issue affects HHVM versions prior to 4.56.3, all versions between 4.57.0 and 4.80.1, all versions between 4.81.0 and 4.93.1, and versions 4.94.0, 4.95.0, 4.96.0, 4.97.0, 4.98.0."
},
{
"lang": "es",
"value": "La función xbuf_format_converter, usada como parte de exif_read_data, estaba agregando un carácter null de terminación a la cadena generada, pero no estaba usando su función estándar append char. Como resultado, si el búfer estuviera lleno, resultaría en una escritura fuera de límites. Este problema afecta HHVM versiones anteriores a 4.56.3, todas las versiones entre 4.57.0 y 4.80.1, todas las versiones entre 4.81.0 y 4.93.1 y las versiones 4.94.0, 4.95.0, 4.96.0, 4.97.0 , 4.98.0"
}
],
"lastModified": "2026-06-17T03:02:36.680",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:facebook:hhvm:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "069C0B7D-5233-4EFF-BBA7-8B84D9227044",
"versionEndExcluding": "4.56.3"
},
{
"criteria": "cpe:2.3:a:facebook:hhvm:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "59DAD37C-9F51-4BE3-B045-537CA259F7F7",
"versionEndExcluding": "4.80.2",
"versionStartIncluding": "4.57.0"
},
{
"criteria": "cpe:2.3:a:facebook:hhvm:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3B78720F-AA79-459F-A66C-5C4D67D7EE31",
"versionEndExcluding": "4.93.2",
"versionStartIncluding": "4.81.0"
},
{
"criteria": "cpe:2.3:a:facebook:hhvm:4.94.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1C4B9A3C-6A5A-45C4-A490-C13CF6D6A867"
},
{
"criteria": "cpe:2.3:a:facebook:hhvm:4.95.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "18D33DC0-E6A7-4DC6-8E9A-2B85842EC21B"
},
{
"criteria": "cpe:2.3:a:facebook:hhvm:4.96.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B0B9078D-3C25-45B2-B5F2-59585A47BACB"
},
{
"criteria": "cpe:2.3:a:facebook:hhvm:4.97.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7B8F5C11-8610-4099-8A45-E6241F3D24E0"
},
{
"criteria": "cpe:2.3:a:facebook:hhvm:4.98.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "47FF13C3-19DC-4F53-BF9D-38AC89D647D5"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve-assign@fb.com"
}