Hhvm CVE-2016-6875

Out-of-bounds write in the (1) mb_detect_encoding, (2) mb_send_mail, and (3) mb_detect_order functions in Facebook HHVM

The array_*_recursive functions in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown v

Self recursion in compact in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors

Integer overflow in StringUtil::implode in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via u

Integer overflow in bcmath in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vector

Passing an attacker controlled size when creating an IOBuf could cause integer overflow, leading to an out of bounds wri

Due to incorrect string size calculations inside the preg_quote function, a large input string passed to the function ca

Various APC functions accept keys containing null bytes as input, leading to premature truncation of input.30.12, all ve

Insufficient boundary checks when processing a string in mb_ereg_replace allows access to out-of-bounds memory.30.12, al

An invalid free in mb_detect_order can cause the application to crash or potentially result in remote code execution.30.

Insufficient boundary checks when formatting numbers in number_format allows read/write access to out-of-bounds memory,

Insufficient boundary checks when processing M_SOFx markers from JPEG headers in the GD extension could allow access to