CVE-2019-11929

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2019-11929
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-11929.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2019-11929
Downstream
Published
2019-10-02T19:15:11.780Z
Modified
2026-07-08T15:54:46.685480Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

Insufficient boundary checks when formatting numbers in number_format allows read/write access to out-of-bounds memory, potentially leading to remote code execution. This issue affects HHVM versions prior to 3.30.10, all versions between 4.0.0 and 4.8.5, all versions between 4.9.0 and 4.18.2, and versions 4.19.0, 4.19.1, 4.20.0, 4.20.1, 4.20.2, 4.21.0, 4.22.0, 4.23.0.

References

Affected packages

Git / github.com/facebook/hhvm

Affected ranges

Type
GIT
Repo
https://github.com/facebook/hhvm
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
6870c5d6361293a6eccc0e1746cf03cb62faad5f
Introduced
7d4f701b9ed004452d695fce4e1ef8f48babbf39
Last affected
8384c051684f8bd1a8b0238a25b2ef4c9e3463d0
Introduced
0abb3b0c92e938bb7dac2d0c1603c5866e2a035b
Last affected
1595ce835cd2b6c7d840287130e9c785cc0d23a2
Introduced
e3f058f758c6ad9bda4a3c074872844aa7759cbf
Last affected
ad54a7ba4a1f73f70908696eb01381fdb64b1457
Fixed
dbeb9a56a638e3fdcef8b691c2a2967132dae692
Database specific 
{
    "cpe": [
        "cpe:2.3:a:facebook:hhvm:*:*:*:*:*:*:*:*",
        "cpe:2.3:a:facebook:hhvm:4.19.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:facebook:hhvm:4.19.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:facebook:hhvm:4.20.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:facebook:hhvm:4.20.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:facebook:hhvm:4.20.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:facebook:hhvm:4.21.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:facebook:hhvm:4.22.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:facebook:hhvm:4.23.0:*:*:*:*:*:*:*"
    ],
    "source": [
        "CPE_RANGE",
        "CPE_STRING",
        "REFERENCES"
    ],
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "3.30.10"
        },
        {
            "introduced": "4.0.0"
        },
        {
            "last_affected": "4.8.5"
        },
        {
            "introduced": "4.9.0"
        },
        {
            "last_affected": "4.18.2"
        },
        {
            "introduced": "4.19.0"
        },
        {
            "last_affected": "4.19.0"
        },
        {
            "introduced": "4.19.1"
        },
        {
            "last_affected": "4.19.1"
        },
        {
            "introduced": "4.20.0"
        },
        {
            "last_affected": "4.20.0"
        },
        {
            "introduced": "4.20.1"
        },
        {
            "last_affected": "4.20.1"
        },
        {
            "introduced": "4.20.2"
        },
        {
            "last_affected": "4.20.2"
        },
        {
            "introduced": "4.21.0"
        },
        {
            "last_affected": "4.21.0"
        },
        {
            "introduced": "4.22.0"
        },
        {
            "last_affected": "4.22.0"
        },
        {
            "introduced": "4.23.0"
        },
        {
            "last_affected": "4.23.0"
        }
    ]
}

Affected versions

4.*
4.19.0
4.19.1
4.20.0
4.20.1
4.20.2
4.21.0
4.22.0
4.23.0
HHVM-3.*
HHVM-3.30.0
HHVM-3.30.1
HHVM-3.30.2
HHVM-3.30.3
HHVM-3.30.4
HHVM-3.30.5
HHVM-3.30.6
HHVM-3.30.7
HHVM-3.30.8
HHVM-3.30.9
HHVM-4.*
HHVM-4.18.0
HHVM-4.18.1
HHVM-4.18.2
HHVM-4.23.0
HHVM-4.8.0
HHVM-4.8.1
HHVM-4.8.2
HHVM-4.8.3
HHVM-4.8.4
HHVM-4.8.5
HPHP-2.*
HPHP-2.1.0
gcc-4.*
gcc-4.6
nightly-2019.*
nightly-2019.03.28
nightly-2019.03.29
nightly-2019.03.30
nightly-2019.03.31
nightly-2019.04.01
nightly-2019.04.02
nightly-2019.04.03
nightly-2019.04.04
nightly-2019.04.05
nightly-2019.04.06
nightly-2019.04.07
nightly-2019.04.08
nightly-2019.04.09
nightly-2019.04.10
nightly-2019.04.11
nightly-2019.04.12
nightly-2019.04.13
nightly-2019.04.14
nightly-2019.04.15
nightly-2019.04.16
nightly-2019.04.17
nightly-2019.04.18
nightly-2019.04.19
nightly-2019.04.20
nightly-2019.04.21
nightly-2019.04.22
nightly-2019.04.23
nightly-2019.04.24
nightly-2019.04.25
nightly-2019.04.26
nightly-2019.04.27
nightly-2019.04.28
nightly-2019.04.29
nightly-2019.04.30
nightly-2019.05.01
nightly-2019.05.02
nightly-2019.05.03
nightly-2019.05.04
nightly-2019.05.05
nightly-2019.05.06
nightly-2019.05.07
nightly-2019.05.08
nightly-2019.05.09
nightly-2019.05.10
nightly-2019.05.11
nightly-2019.05.12
nightly-2019.05.13
nightly-2019.05.14
nightly-2019.05.15
nightly-2019.05.16
nightly-2019.05.17
nightly-2019.05.18
nightly-2019.05.19
nightly-2019.05.20
nightly-2019.05.21
nightly-2019.05.22
nightly-2019.05.23
nightly-2019.05.24
nightly-2019.05.25
nightly-2019.05.26
nightly-2019.05.27
nightly-2019.05.28
nightly-2019.05.29
nightly-2019.05.30
nightly-2019.05.31
nightly-2019.06.01
nightly-2019.06.02
nightly-2019.06.03
nightly-2019.06.04
nightly-2019.06.05
nightly-2019.06.06
nightly-2019.06.07
nightly-2019.06.08
nightly-2019.06.09
nightly-2019.06.10
nightly-2019.06.11
nightly-2019.06.12
nightly-2019.06.13
nightly-2019.06.14
nightly-2019.06.15
nightly-2019.06.16
nightly-2019.06.17
nightly-2019.06.18
nightly-2019.06.19
nightly-2019.06.20
nightly-2019.06.21
nightly-2019.06.22
nightly-2019.06.23
nightly-2019.06.24
nightly-2019.06.25
nightly-2019.06.26
nightly-2019.06.27
nightly-2019.06.28
nightly-2019.06.29
nightly-2019.06.30
nightly-2019.07.01
nightly-2019.07.02
nightly-2019.07.03
nightly-2019.07.04
nightly-2019.07.05
nightly-2019.07.06
nightly-2019.07.07
nightly-2019.07.08
nightly-2019.07.09
nightly-2019.07.10
nightly-2019.07.11
nightly-2019.07.12
nightly-2019.07.13
nightly-2019.07.14
nightly-2019.07.15
nightly-2019.07.16
nightly-2019.07.17
nightly-2019.07.18
nightly-2019.07.19
nightly-2019.07.20
nightly-2019.07.21
nightly-2019.07.22
nightly-2019.07.23
nightly-2019.07.24
nightly-2019.07.25
nightly-2019.07.26
nightly-2019.07.27
nightly-2019.07.28
nightly-2019.07.29
nightly-2019.07.30
nightly-2019.07.31
nightly-2019.08.01
nightly-2019.08.02
nightly-2019.08.03
nightly-2019.08.04
nightly-2019.08.05
nightly-2019.08.06
nightly-2019.08.07
nightly-2019.08.08
nightly-2019.08.09
nightly-2019.08.10
nightly-2019.08.11
nightly-2019.08.12
nightly-2019.08.13
nightly-2019.08.14
nightly-2019.08.15
nightly-2019.08.16
nightly-2019.08.17
nightly-2019.08.18
nightly-2019.08.19
nightly-2019.08.20
nightly-2019.08.21
nightly-2019.08.22
nightly-2019.08.23
nightly-2019.08.24
nightly-2019.08.25
nightly-2019.08.26
nightly-2019.08.27
nightly-2019.08.28
nightly-2019.08.29
nightly-2019.08.30
nightly-2019.08.31
nightly-2019.09.01
nightly-2019.09.02
nightly-2019.09.03
nightly-2019.09.04
nightly-2019.09.05
nightly-2019.09.06
nightly-2019.09.07
nightly-2019.09.08
nightly-2019.09.09
nightly-2019.09.10
nightly-2019.09.11
nightly-2019.09.12
nightly-2019.09.13
nightly-2019.09.14
nightly-2019.09.15
nightly-2019.09.16
nightly-2019.09.17
nightly-2019.09.18
Other
pre-hhvm
src-hphp

Database specific

vanir_signatures_modified 
"2026-07-08T15:54:46Z"
vanir_signatures 
[
    {
        "signature_type": "Line",
        "target": {
            "file": "hphp/runtime/base/zend-string.cpp"
        },
        "deprecated": false,
        "source": "https://github.com/facebook/hhvm/commit/dbeb9a56a638e3fdcef8b691c2a2967132dae692",
        "id": "CVE-2019-11929-0eac49b2",
        "signature_version": "v1",
        "digest": {
            "line_hashes": [
                "291892732761989316588127414655556507780",
                "77371674870589736897970469727307778557",
                "120448928775261171333816876248003924284",
                "335163077205968406262905506575961516817",
                "44501993009175795450316899144745326480",
                "220300078454433325036426905153971653710",
                "271228619686095112893648209410149215616",
                "134665741014938106677259826839097581939"
            ],
            "threshold": 0.9
        }
    },
    {
        "signature_type": "Line",
        "target": {
            "file": "hphp/runtime/version.h"
        },
        "deprecated": false,
        "source": "https://github.com/facebook/hhvm/commit/6870c5d6361293a6eccc0e1746cf03cb62faad5f",
        "id": "CVE-2019-11929-c890894c",
        "signature_version": "v1",
        "digest": {
            "line_hashes": [
                "235852391414298524767191071738289001511",
                "226906434534036808236890046750755363418",
                "236665820971239399431053512182718904106",
                "140335216194151808759673220052749435881"
            ],
            "threshold": 0.9
        }
    },
    {
        "signature_type": "Function",
        "target": {
            "file": "hphp/runtime/base/zend-string.cpp",
            "function": "string_number_format"
        },
        "deprecated": false,
        "source": "https://github.com/facebook/hhvm/commit/dbeb9a56a638e3fdcef8b691c2a2967132dae692",
        "id": "CVE-2019-11929-d8ea53c5",
        "signature_version": "v1",
        "digest": {
            "function_hash": "176609642573453071911192205899028154909",
            "length": 2147.0
        }
    }
]
source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-11929.json"