CVE-2016-1000006: Use After Free
hhvm before 3.12.11 has a use-after-free in the serializememoizeparam() and ResourceBundle::construct() functions.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
hhvmto a version that resolves this vulnerability.Fixed in 3.12.11
Event History
Frequently Asked Questions
What is CVE-2016-1000006?
CVE-2016-1000006 is a vulnerability in hhvm before version 3.12.11 that allows for a use-after-free in the serialize_memoize_param() and ResourceBundle::__construct() functions.
How does CVE-2016-1000006 impact hhvm?
CVE-2016-1000006 can lead to a use-after-free vulnerability in hhvm before version 3.12.11, which could potentially allow an attacker to execute arbitrary code or cause a denial of service.
What is the severity of CVE-2016-1000006?
CVE-2016-1000006 has a severity rating of 9.8, which is considered critical.
How can I fix CVE-2016-1000006?
To fix CVE-2016-1000006, you should update hhvm to version 3.12.11 or later.
Where can I find more information about CVE-2016-1000006?
You can find more information about CVE-2016-1000006 at the following references: [1] [2] [3].