CVE-2016-6870

Critical

Published: 17/02/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Facebook HHVM versions before 3.15.0 contain an out-of-bounds write vulnerability in the mb_detect_encoding, mb_send_mail, and mb_detect_order functions. Attackers can exploit this vulnerability, leading to unspecified impact.

Risk Assessment

This vulnerability may lead to unauthorized access or system instability, posing a threat to the integrity and availability of services.

Recommendation

It is recommended to upgrade Facebook HHVM to version 3.15.0 or later to mitigate this vulnerability.

Original NVD description (English source)

Out-of-bounds write in the (1) mb_detect_encoding, (2) mb_send_mail, and (3) mb_detect_order functions in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors.