{
	"CVE_data_meta": {
		"ASSIGNER": "cve-assign@fb.com",
		"DATE_ASSIGNED": "2020-06-18",
		"ID": "CVE-2020-1900",
		"STATE": "PUBLIC"
	},
	"affects": {
		"vendor": {
			"vendor_data": [
				{
					"vendor_name": "Facebook",
					"product": {
						"product_data": [
							{
								"product_name": "HHVM",
								"version": {
									"version_data": [
										{
											"version_affected": "!>=",
											"version_value": "4.62.1"
										},
										{
											"version_affected": "=",
											"version_value": "4.62.0"
										},
										{
											"version_affected": "!>=",
											"version_value": "4.61.1"
										},
										{
											"version_affected": "=",
											"version_value": "4.61.0"
										},
										{
											"version_affected": "!>=",
											"version_value": "4.60.1"
										},
										{
											"version_affected": "=",
											"version_value": "4.60.0"
										},
										{
											"version_affected": "!>=",
											"version_value": "4.59.1"
										},
										{
											"version_affected": "=",
											"version_value": "4.59.0"
										},
										{
											"version_affected": "!>=",
											"version_value": "4.58.2"
										},
										{
											"version_affected": ">=",
											"version_value": "4.58.0"
										},
										{
											"version_affected": "!>=",
											"version_value": "4.57.1"
										},
										{
											"version_affected": "=",
											"version_value": "4.57.0"
										},
										{
											"version_affected": "!>=",
											"version_value": "4.56.1"
										},
										{
											"version_affected": ">=",
											"version_value": "4.33.0"
										},
										{
											"version_affected": "!>=",
											"version_value": "4.32.3"
										},
										{
											"version_affected": "<",
											"version_value": "4.32.3"
										}
									]
								}
							}
						]
					}
				}
			]
		}
	},
	"data_format": "MITRE",
	"data_type": "CVE",
	"data_version": "4.0",
	"description": {
		"description_data": [
			{
				"lang": "eng",
				"value": "When unserializing an object with dynamic properties HHVM needs to pre-reserve the full size of the dynamic property array before inserting anything into it. Otherwise the array might resize, invalidating previously stored references. This pre-reservation was not occurring in HHVM prior to v4.32.3, between versions 4.33.0 and 4.56.0, 4.57.0, 4.58.0, 4.58.1, 4.59.0, 4.60.0, 4.61.0, 4.62.0."
			}
		]
	},
	"problemtype": {
		"problemtype_data": [
			{
				"description": [
					{
						"lang": "eng",
						"value": "Use After Free (CWE-416)"
					}
				]
			}
		]
	},
	"references": {
		"reference_data": [
			{
				"refsource": "CONFIRM",
				"name": "https://hhvm.com/blog/2020/06/30/security-update.html",
				"url": "https://hhvm.com/blog/2020/06/30/security-update.html"
			},
			{
				"refsource": "MISC",
				"name": "https://github.com/facebook/hhvm/commit/c1c4bb0cf9e076aafaf4ff3515556ef9faf906f3",
				"url": "https://github.com/facebook/hhvm/commit/c1c4bb0cf9e076aafaf4ff3515556ef9faf906f3"
			}
		]
	}
}