{"id":"CVE-2020-1916","details":"An incorrect size calculation in ldap_escape may lead to an integer overflow when overly long input is passed in, resulting in an out-of-bounds write. This issue affects HHVM prior to 4.56.2, all versions between 4.57.0 and 4.78.0, 4.79.0, 4.80.0, 4.81.0, 4.82.0, 4.83.0.","modified":"2026-04-11T12:40:11.378120Z","published":"2021-03-10T16:15:14.173Z","references":[{"type":"ADVISORY","url":"https://hhvm.com/blog/2020/11/12/security-update.html"},{"type":"FIX","url":"https://github.com/facebook/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/facebook/hhvm","events":[{"introduced":"0"},{"fixed":"ee529270ee34b45efe3ae71319c96ea0775b2308"},{"introduced":"ce87598e3c65a922a6e25c7119e2446f1fa6a4b6"},{"fixed":"2fb06fbf495b4cbc968aed3ddef357147eee8200"},{"introduced":"0"},{"last_affected":"b0ab25016bc2839ab3fb433d375de0f6e7242065"},{"introduced":"0"},{"last_affected":"e06cae9be2a752956f556acf8057af520accfecf"},{"introduced":"0"},{"last_affected":"75407bf7bfdd694f18e2660c4e78aeeacb07b622"},{"introduced":"0"},{"last_affected":"8c80a67371f4e7bf55044c9323fbc1b8190fbc5f"},{"introduced":"0"},{"last_affected":"4aa554372ba54b0dadc7c1fbbe9188330efa8c4a"},{"fixed":"abe0b29e4d3a610f9bc920b8be4ad8403364c2d4"}],"database_specific":{"versions":[{"introduced":"0"},{"fixed":"4.56.2"},{"introduced":"4.57.0"},{"fixed":"4.78.1"},{"introduced":"0"},{"last_affected":"4.79.0"},{"introduced":"0"},{"last_affected":"4.80.0"},{"introduced":"0"},{"last_affected":"4.81.0"},{"introduced":"0"},{"last_affected":"4.82.0"},{"introduced":"0"},{"last_affected":"4.83.0"}]}}],"versions":["HHVM-4.56.0","HHVM-4.56.1","HHVM-4.78.0","HHVM-4.79.0","HHVM-4.80.0","HHVM-4.81.0","HHVM-4.82.0","HHVM-4.83.0","HPHP-2.1.0","gcc-4.6","nightly-2019.03.28","nightly-2019.03.29","nightly-2019.03.30","nightly-2019.03.31","nightly-2019.04.01","nightly-2019.04.02","nightly-2019.04.03","nightly-2019.04.04","nightly-2019.04.05","nightly-2019.04.06","nightly-2019.04.07","nightly-2019.04.08","nightly-2019.04.09","nightly-2019.04.10","nightly-2019.04.11","nightly-2019.04.12","nightly-2019.04.13","nightly-2019.04.14","nightly-2019.04.15","nightly-2019.04.16","nightly-2019.04.17","nightly-2019.04.18","nightly-2019.04.19","nightly-2019.04.20","nightly-2019.04.21","nightly-2019.04.22","nightly-2019.04.23","nightly-2019.04.24","nightly-2019.04.25","nightly-2019.04.26","nightly-2019.04.27","nightly-2019.04.28","nightly-2019.04.29","nightly-2019.04.30","nightly-2019.05.01","nightly-2019.05.02","nightly-2019.05.03","nightly-2019.05.04","nightly-2019.05.05","nightly-2019.05.06","nightly-2019.05.07","nightly-2019.05.08","nightly-2019.05.09","nightly-2019.05.10","nightly-2019.05.11","nightly-2019.05.12","nightly-2019.05.13","nightly-2019.05.14","nightly-2019.05.15","nightly-2019.05.16","nightly-2019.05.17","nightly-2019.05.18","nightly-2019.05.19","nightly-2019.05.20","nightly-2019.05.21","nightly-2019.05.22","nightly-2019.05.23","nightly-2019.05.24","nightly-2019.05.25","nightly-2019.05.26","nightly-2019.05.27","nightly-2019.05.28","nightly-2019.05.29","nightly-2019.05.30","nightly-2019.05.31","nightly-2019.06.01","nightly-2019.06.02","nightly-2019.06.03","nightly-2019.06.04","nightly-2019.06.05","nightly-2019.06.06","nightly-2019.06.07","nightly-2019.06.08","nightly-2019.06.09","nightly-2019.06.10","nightly-2019.06.11","nightly-2019.06.12","nightly-2019.06.13","nightly-2019.06.14","nightly-2019.06.15","nightly-2019.06.16","nightly-2019.06.17","nightly-2019.06.18","nightly-2019.06.19","nightly-2019.06.20","nightly-2019.06.21","nightly-2019.06.22","nightly-2019.06.23","nightly-2019.06.24","nightly-2019.06.25","nightly-2019.06.26","nightly-2019.06.27","nightly-2019.06.28","nightly-2019.06.29","nightly-2019.06.30","nightly-2019.07.01","nightly-2019.07.02","nightly-2019.07.03","nightly-2019.07.04","nightly-2019.07.05","nightly-2019.07.06","nightly-2019.07.07","nightly-2019.07.08","nightly-2019.07.09","nightly-2019.07.10","nightly-2019.07.11","nightly-2019.07.12","nightly-2019.07.13","nightly-2019.07.14","nightly-2019.07.15","nightly-2019.07.16","nightly-2019.07.17","nightly-2019.07.18","nightly-2019.07.19","nightly-2019.07.20","nightly-2019.07.21","nightly-2019.07.22","nightly-2019.07.23","nightly-2019.07.24","nightly-2019.07.25","nightly-2019.07.26","nightly-2019.07.27","nightly-2019.07.28","nightly-2019.07.29","nightly-2019.07.30","nightly-2019.07.31","nightly-2019.08.01","nightly-2019.08.02","nightly-2019.08.03","nightly-2019.08.04","nightly-2019.08.05","nightly-2019.08.06","nightly-2019.08.07","nightly-2019.08.08","nightly-2019.08.09","nightly-2019.08.10","nightly-2019.08.11","nightly-2019.08.12","nightly-2019.08.13","nightly-2019.08.14","nightly-2019.08.15","nightly-2019.08.16","nightly-2019.08.17","nightly-2019.08.18","nightly-2019.08.19","nightly-2019.08.20","nightly-2019.08.21","nightly-2019.08.22","nightly-2019.08.23","nightly-2019.08.24","nightly-2019.08.25","nightly-2019.08.26","nightly-2019.08.27","nightly-2019.08.28","nightly-2019.08.29","nightly-2019.08.30","nightly-2019.08.31","nightly-2019.09.01","nightly-2019.09.02","nightly-2019.09.03","nightly-2019.09.04","nightly-2019.09.05","nightly-2019.09.06","nightly-2019.09.07","nightly-2019.09.08","nightly-2019.09.09","nightly-2019.09.10","nightly-2019.09.11","nightly-2019.09.12","nightly-2019.09.13","nightly-2019.09.14","nightly-2019.09.15","nightly-2019.09.16","nightly-2019.09.17","nightly-2019.09.18","nightly-2019.09.19","nightly-2019.09.20","nightly-2019.09.21","nightly-2019.09.22","nightly-2019.09.23","nightly-2019.09.24","nightly-2019.09.25","nightly-2019.09.26","nightly-2019.09.27","nightly-2019.09.28","nightly-2019.09.29","nightly-2019.09.30","nightly-2019.10.01","nightly-2019.10.02","nightly-2019.10.03","nightly-2019.10.04","nightly-2019.10.05","nightly-2019.10.06","nightly-2019.10.07","nightly-2019.10.08","nightly-2019.10.09","nightly-2019.10.10","nightly-2019.10.11","nightly-2019.10.12","nightly-2019.10.13","nightly-2019.10.14","nightly-2019.10.15","nightly-2019.10.16","nightly-2019.10.17","nightly-2019.10.18","nightly-2019.10.19","nightly-2019.10.20","nightly-2019.10.21","nightly-2019.10.22","nightly-2019.10.23","nightly-2019.10.24","nightly-2019.10.25","nightly-2019.10.26","nightly-2019.10.27","nightly-2019.10.28","nightly-2019.10.29","nightly-2019.10.30","nightly-2019.10.31","nightly-2019.11.01","nightly-2019.11.02","nightly-2019.11.03","nightly-2019.11.04","nightly-2019.11.05","nightly-2019.11.06","nightly-2019.11.07","nightly-2019.11.08","nightly-2019.11.09","nightly-2019.11.10","nightly-2019.11.11","nightly-2019.11.12","nightly-2019.11.13","nightly-2019.11.14","nightly-2019.11.15","nightly-2019.11.16","nightly-2019.11.17","nightly-2019.11.18","nightly-2019.11.19","nightly-2019.11.20","nightly-2019.11.21","nightly-2019.11.22","nightly-2019.11.23","nightly-2019.11.24","nightly-2019.11.25","nightly-2019.11.26","nightly-2019.11.27","nightly-2019.11.28","nightly-2019.11.29","nightly-2019.11.30","nightly-2019.12.01","nightly-2019.12.02","nightly-2019.12.03","nightly-2019.12.04","nightly-2019.12.05","nightly-2019.12.06","nightly-2019.12.07","nightly-2019.12.08","nightly-2019.12.09","nightly-2019.12.10","nightly-2019.12.11","nightly-2019.12.12","nightly-2019.12.13","nightly-2019.12.14","nightly-2019.12.15","nightly-2019.12.16","nightly-2019.12.17","nightly-2019.12.18","nightly-2019.12.19","nightly-2019.12.20","nightly-2019.12.21","nightly-2019.12.22","nightly-2019.12.23","nightly-2019.12.24","nightly-2019.12.25","nightly-2019.12.26","nightly-2019.12.27","nightly-2019.12.28","nightly-2019.12.29","nightly-2019.12.30","nightly-2019.12.31","nightly-2020.01.01","nightly-2020.01.02","nightly-2020.01.03","nightly-2020.01.04","nightly-2020.01.05","nightly-2020.01.06","nightly-2020.01.07","nightly-2020.01.08","nightly-2020.01.09","nightly-2020.01.10","nightly-2020.01.11","nightly-2020.01.12","nightly-2020.01.13","nightly-2020.01.14","nightly-2020.01.15","nightly-2020.01.16","nightly-2020.01.17","nightly-2020.01.18","nightly-2020.01.19","nightly-2020.01.20","nightly-2020.01.21","nightly-2020.01.22","nightly-2020.01.23","nightly-2020.01.24","nightly-2020.01.25","nightly-2020.01.26","nightly-2020.01.27","nightly-2020.01.28","nightly-2020.01.29","nightly-2020.01.30","nightly-2020.01.31","nightly-2020.02.01","nightly-2020.02.02","nightly-2020.02.03","nightly-2020.02.04","nightly-2020.02.05","nightly-2020.02.06","nightly-2020.02.07","nightly-2020.02.08","nightly-2020.02.09","nightly-2020.02.10","nightly-2020.02.11","nightly-2020.02.12","nightly-2020.02.13","nightly-2020.02.14","nightly-2020.02.15","nightly-2020.02.16","nightly-2020.02.17","nightly-2020.02.18","nightly-2020.02.19","nightly-2020.02.20","nightly-2020.02.21","nightly-2020.02.22","nightly-2020.02.23","nightly-2020.02.24","nightly-2020.02.25","nightly-2020.02.26","nightly-2020.02.27","nightly-2020.02.28","nightly-2020.02.29","nightly-2020.03.01","nightly-2020.03.02","nightly-2020.03.03","nightly-2020.03.04","nightly-2020.03.05","nightly-2020.03.06","nightly-2020.03.07","nightly-2020.03.08","nightly-2020.03.09","nightly-2020.03.10","nightly-2020.03.11","nightly-2020.03.12","nightly-2020.03.13","nightly-2020.03.14","nightly-2020.03.15","nightly-2020.03.16","nightly-2020.03.17","nightly-2020.03.18","nightly-2020.03.19","nightly-2020.03.20","nightly-2020.03.21","nightly-2020.03.22","nightly-2020.03.23","nightly-2020.03.24","nightly-2020.03.25","nightly-2020.03.26","nightly-2020.03.27","nightly-2020.03.28","nightly-2020.03.29","nightly-2020.03.30","nightly-2020.03.31","nightly-2020.04.01","nightly-2020.04.02","nightly-2020.04.03","nightly-2020.04.04","nightly-2020.04.05","nightly-2020.04.06","nightly-2020.04.07","nightly-2020.04.08","nightly-2020.04.09","nightly-2020.04.10","nightly-2020.04.11","nightly-2020.04.12","nightly-2020.04.13","nightly-2020.04.14","nightly-2020.04.15","nightly-2020.04.16","nightly-2020.04.17","nightly-2020.04.18","nightly-2020.04.19","nightly-2020.04.20","nightly-2020.04.21","nightly-2020.04.22","nightly-2020.04.23","nightly-2020.04.24","nightly-2020.04.25","nightly-2020.04.26","nightly-2020.04.27","nightly-2020.04.28","nightly-2020.04.29","nightly-2020.04.30","nightly-2020.05.01","nightly-2020.05.02","nightly-2020.05.03","nightly-2020.05.04","nightly-2020.05.05","nightly-2020.05.06","nightly-2020.05.07","nightly-2020.05.08","nightly-2020.05.09","nightly-2020.05.10","nightly-2020.05.11","nightly-2020.05.12","nightly-2020.05.13","nightly-2020.05.14","nightly-2020.05.15","nightly-2020.05.16","nightly-2020.05.17","nightly-2020.05.18","nightly-2020.05.19","nightly-2020.05.20","nightly-2020.05.21","nightly-2020.05.22","nightly-2020.05.23","nightly-2020.05.24","nightly-2020.05.25","nightly-2020.05.26","nightly-2020.05.27","nightly-2020.05.28","nightly-2020.05.29","nightly-2020.05.30","nightly-2020.05.31","nightly-2020.06.01","nightly-2020.06.02","nightly-2020.06.03","nightly-2020.06.04","nightly-2020.06.05","nightly-2020.06.06","nightly-2020.06.07","nightly-2020.06.08","nightly-2020.06.09","nightly-2020.06.10","nightly-2020.06.11","nightly-2020.06.12","nightly-2020.06.13","nightly-2020.06.14","nightly-2020.06.15","nightly-2020.06.16","nightly-2020.06.17","nightly-2020.06.18","nightly-2020.06.19","nightly-2020.06.20","nightly-2020.06.21","nightly-2020.06.22","nightly-2020.06.23","nightly-2020.06.24","nightly-2020.06.25","nightly-2020.06.26","nightly-2020.06.27","nightly-2020.06.28","nightly-2020.06.29","nightly-2020.06.30","nightly-2020.07.01","nightly-2020.07.02","nightly-2020.07.03","nightly-2020.07.04","nightly-2020.07.05","nightly-2020.07.06","nightly-2020.07.07","nightly-2020.07.08","nightly-2020.07.09","nightly-2020.07.10","nightly-2020.07.11","nightly-2020.07.12","nightly-2020.07.13","nightly-2020.07.14","nightly-2020.07.15","nightly-2020.07.16","nightly-2020.07.17","nightly-2020.07.18","nightly-2020.07.19","nightly-2020.07.20","nightly-2020.07.21","nightly-2020.07.22","nightly-2020.07.23","nightly-2020.07.24","nightly-2020.07.25","nightly-2020.07.26","nightly-2020.07.27","nightly-2020.07.28","nightly-2020.07.29","nightly-2020.07.30","nightly-2020.07.31","nightly-2020.08.01","nightly-2020.08.02","nightly-2020.08.03","nightly-2020.08.04","nightly-2020.08.05","nightly-2020.08.06","nightly-2020.08.07","nightly-2020.08.08","nightly-2020.08.09","nightly-2020.08.10","nightly-2020.08.11","nightly-2020.08.12","nightly-2020.08.13","nightly-2020.08.14","nightly-2020.08.15","nightly-2020.08.16","nightly-2020.08.17","nightly-2020.08.18","nightly-2020.08.19","nightly-2020.08.20","nightly-2020.08.21","nightly-2020.08.22","nightly-2020.08.23","nightly-2020.08.24","nightly-2020.08.25","nightly-2020.08.26","nightly-2020.08.27","nightly-2020.08.28","nightly-2020.08.29","nightly-2020.08.30","nightly-2020.08.31","nightly-2020.09.01","nightly-2020.09.02","nightly-2020.09.03","nightly-2020.09.04","nightly-2020.09.05","nightly-2020.09.06","nightly-2020.09.07","nightly-2020.09.08","nightly-2020.09.09","nightly-2020.09.10","nightly-2020.09.11","nightly-2020.09.12","nightly-2020.09.13","nightly-2020.09.14","nightly-2020.09.15","nightly-2020.09.16","nightly-2020.09.17","nightly-2020.09.18","nightly-2020.09.19","nightly-2020.09.20","nightly-2020.09.21","nightly-2020.09.22","nightly-2020.09.23","nightly-2020.09.24","nightly-2020.09.25","nightly-2020.09.26","nightly-2020.09.27","nightly-2020.09.28","nightly-2020.09.29","nightly-2020.09.30","nightly-2020.10.01","nightly-2020.10.02","nightly-2020.10.03","nightly-2020.10.04","nightly-2020.10.05","nightly-2020.10.06","nightly-2020.10.07","nightly-2020.10.08","nightly-2020.10.09","nightly-2020.10.10","nightly-2020.10.11","nightly-2020.10.12","nightly-2020.10.13","nightly-2020.10.14","nightly-2020.10.15","nightly-2020.10.16","nightly-2020.10.17","nightly-2020.10.18","nightly-2020.10.19","nightly-2020.10.20","nightly-2020.10.21","nightly-2020.10.22","nightly-2020.10.23","nightly-2020.10.24","nightly-2020.10.25","nightly-2020.10.26","nightly-2020.10.27","nightly-2020.10.28","nightly-2020.10.29","nightly-2020.10.30","nightly-2020.10.31","nightly-2020.11.01","nightly-2020.11.02","nightly-2020.11.03","nightly-2020.11.04","nightly-2020.11.05","nightly-2020.11.06","nightly-2020.11.07","nightly-2020.11.08","nightly-2020.11.09","nightly-2020.11.10","nightly-2020.11.11","nightly-2020.11.12","pre-hhvm","src-hphp"],"database_specific":{"vanir_signatures":[{"digest":{"function_hash":"32315142391097408383139198570496751782","length":1026},"deprecated":false,"source":"https://github.com/facebook/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4","signature_type":"Function","id":"CVE-2020-1916-0234784f","target":{"function":"string_crypt","file":"hphp/zend/zend-string.cpp"},"signature_version":"v1"},{"digest":{"function_hash":"291692884138443403556866798857962114658","length":1066},"deprecated":false,"source":"https://github.com/facebook/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4","signature_type":"Function","id":"CVE-2020-1916-09445d85","target":{"function":"HHVM_FUNCTION","file":"hphp/runtime/ext/ldap/ext_ldap.cpp"},"signature_version":"v1"},{"digest":{"line_hashes":["153300239319936645071886966036675704684","295904806967669368280944968971657809673","99133765804485045964521025334947039974","27638213683456027787784732021170501676","232899773815313318758223297449279710037","330492711637862273934584752513218455774","262052390326210208228353396764835323710","313728593756853567858467237598442512013","289602277122483461653262266133022845290","326024619064313388084882947918828063519","113013651368049508217712015126050111222","245024909404068567492141187432852991340","83783585964181254825343372950460196501","304715653248917398306495114447308687997","79957104101863333676120170936846531956","244625954361826096982381277199443765665","213742986222750926783507072284074984951","11512607156191155297697654043081255063","227502945880095007457971197159933878389","14220062232966461595945741712164448990","334711697991821347002431115270269041484","133667084158002356528098093311958931710","338739794592853516811355334627181684836","300560892279042939919704171831910480647"],"threshold":0.9},"deprecated":false,"source":"https://github.com/facebook/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4","signature_type":"Line","id":"CVE-2020-1916-0a32d419","target":{"file":"hphp/util/light-process.cpp"},"signature_version":"v1"},{"digest":{"function_hash":"210275169280058316452295708979501353606","length":439},"deprecated":false,"source":"https://github.com/facebook/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4","signature_type":"Function","id":"CVE-2020-1916-14c4ea79","target":{"function":"do_change_user","file":"hphp/util/light-process.cpp"},"signature_version":"v1"},{"digest":{"line_hashes":["36956090015315603017141730089953471639","46108539517113444196044381480482401829","285529554748387993144151444026503425585","95757993391105962874379486527881175395","279909141059809553946753373743161011402","222644702114683983152330080470903522342"],"threshold":0.9},"deprecated":false,"source":"https://github.com/facebook/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4","signature_type":"Line","id":"CVE-2020-1916-19ec7de5","target":{"file":"hphp/runtime/base/preg.h"},"signature_version":"v1"},{"digest":{"function_hash":"275941699024587600509015722083562254359","length":357},"deprecated":false,"source":"https://github.com/facebook/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4","signature_type":"Function","id":"CVE-2020-1916-1fdc5804","target":{"function":"StringUtil::Crypt","file":"hphp/runtime/base/string-util.cpp"},"signature_version":"v1"},{"digest":{"line_hashes":["133133990269620441931601076727088208036","33451550003600826786761444827757739900","72318699131460137554481801561383294548","127575323953097060510672454560651395208","98556166875678876059390389437878699431"],"threshold":0.9},"deprecated":false,"source":"https://github.com/facebook/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4","signature_type":"Line","id":"CVE-2020-1916-40e1f384","target":{"file":"hphp/runtime/ext/gd/libgd/gd.cpp"},"signature_version":"v1"},{"digest":{"line_hashes":["28589786793399802352507114342322571412","304344679621845806645170314187089307619","113334605668934533256516010032469343227","140335216194151808759673220052749435881"],"threshold":0.9},"deprecated":false,"source":"https://github.com/facebook/hhvm/commit/ee529270ee34b45efe3ae71319c96ea0775b2308","signature_type":"Line","id":"CVE-2020-1916-4821c8f9","target":{"file":"hphp/runtime/version.h"},"signature_version":"v1"},{"digest":{"function_hash":"48151238394374505866032213935737154626","length":3214},"deprecated":false,"source":"https://github.com/facebook/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4","signature_type":"Function","id":"CVE-2020-1916-4dd8f687","target":{"function":"BF_crypt","file":"hphp/zend/crypt-blowfish.cpp"},"signature_version":"v1"},{"digest":{"line_hashes":["285307860804117296888475649272925383037","203140963140904758479303120912283789543","305971096830541567448209745483743876345","99087380231718981607408730419908837636","198442010505411655884685340383906509713","96574425334543627276230682454657178350","108234542512787891092982153958868934633","245466882000976464873518007985424594879","99710510706054418013678794616919852401","50830344810693748873405267658212530743","156640315850576854551657747447719459117","16268486499559022161171190776864309660","170161303246116206458985432406086441005"],"threshold":0.9},"deprecated":false,"source":"https://github.com/facebook/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4","signature_type":"Line","id":"CVE-2020-1916-59c3fafc","target":{"file":"hphp/zend/zend-string.cpp"},"signature_version":"v1"},{"digest":{"function_hash":"141690697493115597784134103222268311965","length":505},"deprecated":false,"source":"https://github.com/facebook/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4","signature_type":"Function","id":"CVE-2020-1916-5f2f3181","target":{"function":"PCRECache::dump","file":"hphp/runtime/base/preg.cpp"},"signature_version":"v1"},{"digest":{"line_hashes":["1793073766555469182942809493908636688","32755577242573893587887539207297385257","313910954100440453697345401198147500265","334417825899089000540822912194129992618"],"threshold":0.9},"deprecated":false,"source":"https://github.com/facebook/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4","signature_type":"Line","id":"CVE-2020-1916-62c3888b","target":{"file":"hphp/runtime/base/string-util.cpp"},"signature_version":"v1"},{"digest":{"line_hashes":["107687481536417448823291068589799015071","69982210057059821548528228275127378258","198637955553749850684722500119168394023","338072890056362845985944150437161544810","127068174196052780959638939249628543218","294172404112476854756369650541535926493","271245107185950204020981110325041997979","109471751514030751056516505359911955419","21072984271207229276513245769172381970","63501944882734345342504606663967318246","105533043894144925862406501185260165926","219009430254836558242724939066245736376","32471999539746917184559537684063349181","77147949202207580158759164210199812787","217116797857328665720367537553226959825","187390400581312820850543241573290462996","206453790101751500523077322960474847907","257719742402946337479556951940827898789","40852789804335017178984256223726035676","34744683402240276451209631426060565779","172572521693954626916528770019528746116","152113751342323528145009810712275575016","191933700493712784589976270733783494162","33728178739004986832189929323540312355","18674323550594163514992874909756316669","12433677548103069598821337327127774160","147755252939738428553775747392870500673","221040499059921647307259877666274364380","328399668681233477568764616250435626843","65299917696952684662391254484468053329"],"threshold":0.9},"deprecated":false,"source":"https://github.com/facebook/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4","signature_type":"Line","id":"CVE-2020-1916-71f2715d","target":{"file":"hphp/runtime/base/preg.cpp"},"signature_version":"v1"},{"digest":{"function_hash":"160469826899761946032830380296828123408","length":776},"deprecated":false,"source":"https://github.com/facebook/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4","signature_type":"Function","id":"CVE-2020-1916-76e0bba3","target":{"function":"HHVM_METHOD","file":"hphp/runtime/ext/xmlreader/ext_xmlreader.cpp"},"signature_version":"v1"},{"digest":{"line_hashes":["33454336160456678248462452464779021267","67384325072526356874491619984610945637","37536044244405383633242229082848527784","140335216194151808759673220052749435881"],"threshold":0.9},"deprecated":false,"source":"https://github.com/facebook/hhvm/commit/2fb06fbf495b4cbc968aed3ddef357147eee8200","signature_type":"Line","id":"CVE-2020-1916-79ab10fc","target":{"file":"hphp/runtime/version.h"},"signature_version":"v1"},{"digest":{"function_hash":"1857107912704393790624450238173933774","length":1522},"deprecated":false,"source":"https://github.com/facebook/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4","signature_type":"Function","id":"CVE-2020-1916-89f13a15","target":{"function":"gdImageCreateTrueColor","file":"hphp/runtime/ext/gd/libgd/gd.cpp"},"signature_version":"v1"},{"digest":{"line_hashes":["51001310750640145119218617241128215547","78056449833029906572124340700118762640","177425561368267329750379552618676606912","161160344212673577255587524586160946192","156715336778501878335361155674395202537","322015272536699240351359536712656463333","157339035177529793088941555175560421197","324205823850653789752628339716863510664"],"threshold":0.9},"deprecated":false,"source":"https://github.com/facebook/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4","signature_type":"Line","id":"CVE-2020-1916-90c7757f","target":{"file":"hphp/runtime/ext/xmlreader/ext_xmlreader.cpp"},"signature_version":"v1"},{"digest":{"line_hashes":["215668176756032931027443423984043464779","110843257751995697653975292145457031502","105815747251620859876177055909492952152","278219377990536847456801313924976805991","63918414930222345389271107157402297818","148866067944859151196776827743401414205","301863773670211270415550334285158739551","223089364518266010443786248749648563949","113532459417378750624453542556016058460","92664851771472992350272767684091996858","35435994434138394687317743775815047271","214148354504740524502862634943579521838","157922644326472591735980321141239831346","112065292815752692825421818003275904970","163475572636105789197204946265608522870","210526957247834183407598186090457924925","270530371589062420661448674334573942490","333319166371103717938224280564414912177","179855490062453847667244565705745427334","72586592103313927761423837911020494567","304241042268196883799333326745318345413","171994925688116974779693601808575114925","150441543242860013778956958757751332012","212251140865296008892322361899220172466","211405675831202126794840983439222652417","219838268974882931959005213476394383759","228200821063404197946329299273370677871","257544992021463746813414686023971197350","170282015193837413568097197997627939393","313318621160984465599265410528160573136","319293048894371409245553327354088026866"],"threshold":0.9},"deprecated":false,"source":"https://github.com/facebook/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4","signature_type":"Line","id":"CVE-2020-1916-93ea1f80","target":{"file":"hphp/runtime/server/admin-request-handler.cpp"},"signature_version":"v1"},{"digest":{"line_hashes":["328769473553441248613162905715291591864","120481257849985986449240125362173557472","243417452934957518609290219156289488360","254157856435306279685707401947233667091","268887195265540793255768295014883514495","272243386757027999421563719416103199372","279333701603258864656433436343087072789","139517654840667491787661872558587041318","307307323387413010999661907504280234363","200546423623476840162547150627518205231","93207636470684901049904820363453873098","163576639998042084370541882343016989449","331851349351708720922416324967230473014","169223595922074710528794269501580630185","97906430830768358989964843249259497199","314996172691647860438955402719703094146"],"threshold":0.9},"deprecated":false,"source":"https://github.com/facebook/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4","signature_type":"Line","id":"CVE-2020-1916-964230cd","target":{"file":"hphp/runtime/base/runtime-option.cpp"},"signature_version":"v1"},{"digest":{"line_hashes":["132302892312948806749643493054127692338","144544364579782948276482057326356876545","251381907063100539551610120719393741884"],"threshold":0.9},"deprecated":false,"source":"https://github.com/facebook/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4","signature_type":"Line","id":"CVE-2020-1916-9910dc7b","target":{"file":"hphp/runtime/base/runtime-option.h"},"signature_version":"v1"},{"digest":{"line_hashes":["336594479859397113917263131919658546339","246187896042649276162794578932354389789","169905785816511821689786995722163931251","182404583683536765622541642402193096007","161276781042250450362225560849487743297"],"threshold":0.9},"deprecated":false,"source":"https://github.com/facebook/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4","signature_type":"Line","id":"CVE-2020-1916-a2fc9318","target":{"file":"hphp/zend/crypt-blowfish.cpp"},"signature_version":"v1"},{"digest":{"function_hash":"200814695898816512142257541460696318322","length":23944},"deprecated":false,"source":"https://github.com/facebook/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4","signature_type":"Function","id":"CVE-2020-1916-a3e29de2","target":{"function":"AdminRequestHandler::handleRequest","file":"hphp/runtime/server/admin-request-handler.cpp"},"signature_version":"v1"},{"digest":{"function_hash":"128635506455363568584529033795189545169","length":73},"deprecated":false,"source":"https://github.com/facebook/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4","signature_type":"Function","id":"CVE-2020-1916-ae968ce3","target":{"function":"pcre_dump_cache","file":"hphp/runtime/base/preg.cpp"},"signature_version":"v1"},{"digest":{"line_hashes":["46232892469802242532894149464515063868","109498395471905747547346822559054342238","116069554465826252841053201067559388729","247971463080932680607418900398944948319"],"threshold":0.9},"deprecated":false,"source":"https://github.com/facebook/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4","signature_type":"Line","id":"CVE-2020-1916-bd9a90fa","target":{"file":"hphp/runtime/ext/ldap/ext_ldap.cpp"},"signature_version":"v1"},{"digest":{"line_hashes":["60364244777355772386698881230823267842","165166594758250700767704707346439579075","69913749781242406406180725924867127315","172397043813504108647050187347398086944","82316755028964617845333724473144500920","185058460107310527586016199092572513256","203112486371261279816640313349378502108","44297471342902903899149510898537974633"],"threshold":0.9},"deprecated":false,"source":"https://github.com/facebook/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4","signature_type":"Line","id":"CVE-2020-1916-d0a37e2a","target":{"file":"hphp/runtime/server/admin-request-handler.h"},"signature_version":"v1"},{"digest":{"function_hash":"117515758510859782512496948006273067755","length":658},"deprecated":false,"source":"https://github.com/facebook/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4","signature_type":"Function","id":"CVE-2020-1916-deb4fb16","target":{"function":"AdminRequestHandler::handleDumpStaticStringsRequest","file":"hphp/runtime/server/admin-request-handler.cpp"},"signature_version":"v1"},{"digest":{"line_hashes":["13256810394560000746740672437856290318","7916080787635857232121587362895192014","122861357710270454488169248264177681480"],"threshold":0.9},"deprecated":false,"source":"https://github.com/facebook/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4","signature_type":"Line","id":"CVE-2020-1916-e0928be6","target":{"file":"hphp/util/light-process.h"},"signature_version":"v1"},{"digest":{"line_hashes":["108081873869946675601317064931170347298","58181243662334894874393775723671006129","131590539913466560493344430516858171120","180075591739058228336205742578146353466"],"threshold":0.9},"deprecated":false,"source":"https://github.com/facebook/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4","signature_type":"Line","id":"CVE-2020-1916-eff9f06c","target":{"file":"hphp/runtime/ext/domdocument/ext_domdocument.h"},"signature_version":"v1"}],"vanir_signatures_modified":"2026-04-11T12:40:11Z","source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-1916.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}