How many CVEs have a located fix in facebook/hhvm?

39 published CVEs have a fix traced to functions in facebook/hhvm, touching 79 functions across 46 files.

Which function in facebook/hhvm has been patched by the most CVEs?

string_number_format in hphp/runtime/base/zend-string.cpp has been changed by 2 CVE fixes, from 2019 to 2019.

How large is a typical CVE fix in facebook/hhvm?

The median fix changes 7 lines. 67% of fixes change 20 lines or fewer, and 49% change a single function.

How is a fix located to a function?

The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

RadicalNotion.AI

Log in Create an account

cpp

c

#110 of 500 repositories

facebook/hhvm

Name: facebook/hhvm: functions patched by CVE fixes
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

Functions and files changed by CVE fixes in this repository.

Latest located fix May 10, 2023

39

CVE fixes located

Published CVEs

79

Functions patched

Distinct function sites

46

Files patched

Distinct source files

2014–2023

Years covered

By CVE publication date

Overview

39 published CVEs have a fix traced to functions in facebook/hhvm, the earliest published in 2014. Those fixes changed 79 distinct functions across 46 files, in 314 patch hunks.

Among the 500 repositories tracked here, facebook/hhvm ranks #110 by the number of CVEs with a located fix.

Most patched functions

Functions in facebook/hhvm changed by the most CVE fixes.

Most patched files

Files in facebook/hhvm changed by the most CVE fixes.

1hphp/util/light-process.cpp4 CVEs · 14 functions
2hphp/runtime/base/zend-string.cpp4 CVEs · 3 functions
3hphp/runtime/ext/mbstring/ext_mbstring.cpp3 CVEs · 3 functions
4hphp/runtime/base/string-util.cpp3 CVEs · 2 functions
5hphp/runtime/ext/json/JSON_parser.cpp3 CVEs · 2 functions
6hphp/runtime/ext/array/ext_array.cpp2 CVEs · 4 functions
7hphp/runtime/base/preg.cpp2 CVEs · 3 functions
8hphp/runtime/server/admin-request-handler.cpp2 CVEs · 3 functions
9hphp/runtime/base/variable-unserializer.cpp2 CVEs · 2 functions
10hphp/runtime/ext/gd/ext_gd.cpp2 CVEs · 2 functions

Fix size

How much code a CVE fix in facebook/hhvm changes, with backports counted once.

7

Median lines changed

Added plus removed, per CVE

67%

Fixes of 20 lines or fewer

Share of CVE fixes

49%

Fixes in a single function

Share of CVE fixes

Latest CVEs

The most recently published CVEs with a fix located in facebook/hhvm, and the functions each fix changed.

CVE-2022-36937
CVE-2022-36937setupCrypto
Critical · CVSS 9.8
EPSS 0.5%2023-05-10
CVE-2019-3556
CVE-2019-3556do_change_user DumpFile handleRequest
High · CVSS 8.1
EPSS 1.8%2021-10-26
CVE-2020-1900
CVE-2020-1900unserializeProp
Critical · CVSS 9.8
EPSS 1.4%2021-03-11
CVE-2020-1899
CVE-2020-1899matchString
High · CVSS 7.5
EPSS 1.2%2021-03-11
CVE-2020-1898
CVE-2020-1898fb_compact_unserialize_from_buffer unserializeThing FBUnserializer
High · CVSS 7.5
EPSS 1.2%2021-03-11
CVE-2020-1916
CVE-2020-1916do_change_user DumpFile handleRequest
Critical · CVSS 9.8
EPSS 1.4%2021-03-10
CVE-2020-1893
CVE-2020-1893SimpleParser
High · CVSS 7.5
EPSS 1.1%2020-03-03
CVE-2020-1892
CVE-2020-1892JSON_parser
High · CVSS 8.1
EPSS 1.1%2020-03-03
CVE-2020-1888
CVE-2020-1888SimpleParser
High · CVSS 7.5
EPSS 1.1%2020-03-03
CVE-2016-1000109
CVE-2016-1000109onHeader
Medium · CVSS 5.3
EPSS 5.1%2020-02-19
CVE-2016-1000005
CVE-2016-1000005mcrypt_get_block_size
Critical · CVSS 9.8
EPSS 1.4%2020-02-19
CVE-2016-1000004
CVE-2016-1000004class_from_name SimpleXMLElement_exportNode
Critical · CVSS 9.8
EPSS 0.7%2020-02-19

Get an alert for each new facebook/hhvm CVE, with the patched functions and AI-written analysis.

Monitor hhvm CVEs

Other repositories

Repositories with a similar number of located CVE fixes.

Combodo/iTop39 CVEs debian/xorg-server39 CVEs givanz/Vvveb39 CVEs honojs/hono39 CVEs rabbitmq/rabbitmq-server39 CVEs vercel/next.js39 CVEs apache/struts40 CVEs Exiv2/exiv240 CVEs

Browse all repositories

Frequently asked questions

Common questions about CVE fixes in facebook/hhvm.

How many CVEs have a located fix in facebook/hhvm?: 39 published CVEs have a fix traced to functions in facebook/hhvm, touching 79 functions across 46 files.
Which function in facebook/hhvm has been patched by the most CVEs?: string_number_format in hphp/runtime/base/zend-string.cpp has been changed by 2 CVE fixes, from 2019 to 2019.
How large is a typical CVE fix in facebook/hhvm?: The median fix changes 7 lines. 67% of fixes change 20 lines or fewer, and 49% change a single function.
How is a fix located to a function?: The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

References

Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.

Track facebook/hhvm CVEs

Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.

Create an account See pricing