{
  "affected": [
    {
      "ranges": [
        {
          "database_specific": {
            "versions": [
              {
                "introduced": "0"
              },
              {
                "fixed": "2021.07.22.00"
              }
            ]
          },
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4baba28200d7446c870e96f3cdbeb492f54625d0"
            },
            {
              "fixed": "4f304af1411e68851bdd00ef6140e9de4616f7d3"
            }
          ],
          "repo": "https://github.com/facebook/folly",
          "type": "GIT"
        },
        {
          "database_specific": {
            "versions": [
              {
                "introduced": "0"
              },
              {
                "fixed": "4.80.5"
              },
              {
                "introduced": "4.81.0"
              },
              {
                "last_affected": "4.102.1"
              },
              {
                "introduced": "4.103.0"
              },
              {
                "last_affected": "4.113.0"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "4.114.0"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "4.115.0"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "4.116.0"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "4.117.0"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "4.118.0"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "4.118.1"
              }
            ]
          },
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "00f8ad22201154c26b69a62306e0e7b2c6834444"
            },
            {
              "introduced": "75407bf7bfdd694f18e2660c4e78aeeacb07b622"
            },
            {
              "last_affected": "b87f02a6bf7a376ee884d7d3ecb22fd040390ba5"
            },
            {
              "introduced": "1ab4d92ac6ce6eff650e61088421b2d1494aaefe"
            },
            {
              "last_affected": "36499464ddf3e5d6312b90938066b8cac9ad89af"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "0d13ab43c2f055125e5bd54eefb742421e9c6105"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "904bbb75d5e1588c04fd1acf46d88d5026739302"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "4743972f9e76b010edaf7625ff06b6d1a4ce54f1"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "8af68470882132c7018944d46c5cb4f4f554d5dd"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "6ffca5f13da641ecc1dbbb60f42270e1fe6a59c7"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "c50a0e755fbab8c5305d4ec0a26df0236221560e"
            }
          ],
          "repo": "https://github.com/facebook/hhvm",
          "type": "GIT"
        }
      ]
    }
  ],
  "details": "Passing an attacker controlled size when creating an IOBuf could cause integer overflow, leading to an out of bounds write on the heap with the possibility of remote code execution. This issue affects versions of folly prior to v2021.07.22.00. This issue affects HHVM versions prior to 4.80.5, all versions between 4.81.0 and 4.102.1, all versions between 4.103.0 and 4.113.0, and versions 4.114.0, 4.115.0, 4.116.0, 4.117.0, 4.118.0 and 4.118.1.",
  "id": "CVE-2021-24036",
  "modified": "2026-03-13T21:48:53.287128424Z",
  "published": "2021-07-23T01:15:07.073Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://hhvm.com/blog/2021/07/20/security-update.html"
    },
    {
      "type": "ADVISORY",
      "url": "https://www.facebook.com/security/advisories/cve-2021-24036"
    },
    {
      "type": "FIX",
      "url": "https://github.com/facebook/folly/commit/4f304af1411e68851bdd00ef6140e9de4616f7d3"
    }
  ],
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}