description: The Memcache::getextendedstats function can be used to trigger an out-of-bounds read. Exploiting this issue requires control over memcached server hostnames and/or ports. This affects all supported versions of HHVM (3.30 and 3.27.4 and below).
problem types: Out-of-bounds Read (CWE-125)
affected:
{
product: HHVM
vendor: Facebook
versions:
status: affected, version: 3.30.1
lessThan: unspecified, status: affected, version: 3.30.0, versionType: custom
status: affected, version: 3.27.5
lessThan: 3.27.5, status: affected, version: unspecified, versionType: custom
}