Facebook Patches “Memory Disclosure Using JPEG Images” Flaws in HHVM Servers

By GIXnews


Facebook has patched two high-severity vulnerabilities in its server application that could have allowed remote attackers to unauthorisedly obtain sensitive information or cause a denial of service just by uploading a maliciously constructed JPEG image file.

The vulnerabilities reside in HHVM (HipHop Virtual Machine)—a high-performance, open source virtual machine developed by Facebook for

Source:: The Hackers News