{"affected":[{"affectedData":[{"product":"HHVM","vendor":"Facebook","versions":[{"status":"affected","version":"4.45.1"},{"status":"affected","version":"4.45.0"},{"status":"affected","version":"4.44.1"},{"status":"affected","version":"4.44.0"},{"status":"affected","version":"4.43.1"},{"status":"affected","version":"4.43.0"},{"status":"affected","version":"4.42.1"},{"status":"affected","version":"4.42.0"},{"status":"affected","version":"4.41.1"},{"status":"affected","version":"4.41.0"},{"status":"affected","version":"4.40.1"},{"status":"affected","version":"4.40.0"},{"status":"affected","version":"4.39.1"},{"status":"affected","version":"4.39.0"},{"status":"affected","version":"4.38.1"},{"lessThan":"unspecified","status":"affected","version":"4.33.0","versionType":"custom"},{"status":"affected","version":"4.32.1"},{"lessThan":"unspecified","status":"affected","version":"4.9.0","versionType":"custom"},{"status":"affected","version":"4.8.7"},{"lessThanOrEqual":"4.8.6","status":"affected","version":"unspecified","versionType":"custom"}]}],"source":"cve-assign@fb.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:facebook:hhvm:*:*:*:*:*:*:*:*","matchCriteriaId":"D1FC3F1B-FB6A-4EC4-8878-0C55652434F7","versionEndExcluding":"4.8.7","vulnerable":true},{"criteria":"cpe:2.3:a:facebook:hhvm:*:*:*:*:*:*:*:*","matchCriteriaId":"D25B1929-CF0F-4D0F-9268-6022762717FE","versionEndIncluding":"4.32.0","versionStartIncluding":"4.9.0","vulnerable":true},{"criteria":"cpe:2.3:a:facebook:hhvm:*:*:*:*:*:*:*:*","matchCriteriaId":"87A4049D-2F34-4F15-83B4-0B620EB43500","versionEndIncluding":"4.38.0","versionStartIncluding":"4.33.0","vulnerable":true},{"criteria":"cpe:2.3:a:facebook:hhvm:4.39.0:*:*:*:*:*:*:*","matchCriteriaId":"43688064-E2D3-461C-982C-A9702623A41F","vulnerable":true},{"criteria":"cpe:2.3:a:facebook:hhvm:4.40.0:*:*:*:*:*:*:*","matchCriteriaId":"EF8C8ED9-02DD-4F9C-9B76-751FACE3ED48","vulnerable":true},{"criteria":"cpe:2.3:a:facebook:hhvm:4.41.0:*:*:*:*:*:*:*","matchCriteriaId":"94FEC1E6-58FD-47C1-B05E-80BAE3840532","vulnerable":true},{"criteria":"cpe:2.3:a:facebook:hhvm:4.42.0:*:*:*:*:*:*:*","matchCriteriaId":"503ED662-BA21-469D-9FDC-73622786B29D","vulnerable":true},{"criteria":"cpe:2.3:a:facebook:hhvm:4.43.0:*:*:*:*:*:*:*","matchCriteriaId":"F6F55273-3CA7-4432-9D43-951EC943E2B4","vulnerable":true},{"criteria":"cpe:2.3:a:facebook:hhvm:4.44.0:*:*:*:*:*:*:*","matchCriteriaId":"89BDE742-DE38-444B-9B40-6F14D6047B14","vulnerable":true},{"criteria":"cpe:2.3:a:facebook:hhvm:4.45.0:*:*:*:*:*:*:*","matchCriteriaId":"90646244-2B6C-402F-9835-9D540DE1EBC9","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Insufficient boundary checks when decoding JSON in TryParse reads out of bounds memory, potentially leading to DOS. This issue affects HHVM 4.45.0, 4.44.0, 4.43.0, 4.42.0, 4.41.0, 4.40.0, 4.39.0, versions between 4.33.0 and 4.38.0 (inclusive), versions between 4.9.0 and 4.32.0 (inclusive), and versions prior to 4.8.7."},{"lang":"es","value":"Comprobaciones de límites insuficientes cuando se decodifica JSON en TryParse lee la memoria fuera de límites, conllevando potencialmente a una DOS. Este problema afecta a HHVM versiones 4.45.0, 4.44.0, 4.43.0, 4.42.0, 4.41.0, 4.40.0, 4.39.0, versiones entre 4.33.0 y 4.38.0 (inclusive), y versiones entre 4.9.0 y 4.32.0 (inclusive), y versiones anteriores a 4.8.7."}],"id":"CVE-2020-1893","lastModified":"2026-06-17T03:02:34.107","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"LOW","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0,"confidentialityImpact":"NONE","integrityImpact":"NONE","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","version":"2.0"},"exploitabilityScore":10.0,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2020-03-03T15:15:12.057","references":[{"source":"cve-assign@fb.com","tags":["Patch"],"url":"https://github.com/facebook/hhvm/commit/bd586671a3c22eb2f07e55f11b3ce64e1f7961e7"},{"source":"cve-assign@fb.com","tags":["Vendor Advisory"],"url":"https://hhvm.com/blog/2020/02/20/security-update.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"url":"https://github.com/facebook/hhvm/commit/bd586671a3c22eb2f07e55f11b3ce64e1f7961e7"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://hhvm.com/blog/2020/02/20/security-update.html"}],"sourceIdentifier":"cve-assign@fb.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-125"}],"source":"cve-assign@fb.com","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-125"}],"source":"nvd@nist.gov","type":"Primary"}]}