VULNERABILITY INTELLIGENCE

CVE-2016-6872

CVSS score9.8 CRITICAL

EPSS probability2.22%

CISA KEVNot currently listed

Published2017-02-17

Last modified2026-06-17

Description

Integer overflow in StringUtil::implode in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors.