CVE-2016-6870

—

CVSS 3.0

9.8 critical

EPSS

2%p82

Published

Feb 17, 2017 (Feb 17, 2017)

Modified

Jun 17, 2026

Description

Out-of-bounds write in the (1) mb_detect_encoding, (2) mb_send_mail, and (3) mb_detect_order functions in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors.

Vendors: facebook
Products: hhvm
Weakness: CWE-787
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.2%)

In the news0 stories

No ingested article mentions this CVE yet.