CVE-2021-24036

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2021-24036
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-24036.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2021-24036
Downstream
Published
2021-07-23T01:15:07Z
Modified
2026-10-22T07:19:00Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

Passing an attacker controlled size when creating an IOBuf could cause integer overflow, leading to an out of bounds write on the heap with the possibility of remote code execution. This issue affects versions of folly prior to v2021.07.22.00. This issue affects HHVM versions prior to 4.80.5, all versions between 4.81.0 and 4.102.1, all versions between 4.103.0 and 4.113.0, and versions 4.114.0, 4.115.0, 4.116.0, 4.117.0, 4.118.0 and 4.118.1.

Database specific 
{
    "unresolved_ranges": [
        {
            "cpes": [
                "cpe:2.3:a:facebook:hhvm:*:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "range": [
                        {
                            "fixed": "4.80.5"
                        },
                        {
                            "introduced": "4.81.0"
                        },
                        {
                            "last_affected": "4.102.1"
                        },
                        {
                            "introduced": "4.103.0"
                        },
                        {
                            "last_affected": "4.113.0"
                        }
                    ],
                    "source": "CPE_RANGE"
                }
            ],
            "vendor_product": "facebook:hhvm"
        },
        {
            "cpes": [
                "cpe:2.3:a:facebook:hhvm:4.114.0:*:*:*:*:*:*:*",
                "cpe:2.3:a:facebook:hhvm:4.115.0:*:*:*:*:*:*:*",
                "cpe:2.3:a:facebook:hhvm:4.116.0:*:*:*:*:*:*:*",
                "cpe:2.3:a:facebook:hhvm:4.117.0:*:*:*:*:*:*:*",
                "cpe:2.3:a:facebook:hhvm:4.118.0:*:*:*:*:*:*:*",
                "cpe:2.3:a:facebook:hhvm:4.118.1:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "range": [
                        {
                            "introduced": "4.114.0"
                        },
                        {
                            "last_affected": "4.114.0"
                        },
                        {
                            "introduced": "4.115.0"
                        },
                        {
                            "last_affected": "4.115.0"
                        },
                        {
                            "introduced": "4.116.0"
                        },
                        {
                            "last_affected": "4.116.0"
                        },
                        {
                            "introduced": "4.117.0"
                        },
                        {
                            "last_affected": "4.117.0"
                        },
                        {
                            "introduced": "4.118.0"
                        },
                        {
                            "last_affected": "4.118.0"
                        },
                        {
                            "introduced": "4.118.1"
                        },
                        {
                            "last_affected": "4.118.1"
                        }
                    ],
                    "source": "CPE_STRING"
                }
            ],
            "vendor_product": "facebook:hhvm"
        }
    ]
}
References

Affected packages

Git / github.com/facebook/folly

Affected ranges

Type
GIT
Repo
https://github.com/facebook/folly
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
4baba28200d7446c870e96f3cdbeb492f54625d0
Fixed
4f304af1411e68851bdd00ef6140e9de4616f7d3
Database specific
Show details 
{
    "extracted_events": [
        {
            "cpe": "cpe:2.3:a:facebook:folly:*:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "0"
                },
                {
                    "fixed": "2021.07.22.00"
                }
            ],
            "source": "CPE_RANGE"
        },
        {
            "range": [
                {
                    "fixed": "4f304af1411e68851bdd00ef6140e9de4616f7d3"
                }
            ],
            "source": "REFERENCES_COMMIT"
        }
    ]
}

Affected versions

2016.*
2016.07.26
Other
deprecate-dynamic-initializer
v0.*
v0.22.0
v0.23.0
v0.24.0
v0.25.0
v0.26.0
v0.27.0
v0.28.0
v0.29.0
v0.30.0
v0.31.0
v0.32.0
v0.33.0
v0.34.0
v0.35.0
v0.36.0
v0.37.0
v0.38.0
v0.39.0
v0.40.0
v0.41.0
v0.42.0
v0.43.0
v0.45.0
v0.47.0
v0.48.0
v0.49.0
v0.49.1
v0.50.0
v0.51.0
v0.52.0
v0.53.0
v0.54.0
v0.55.0
v0.56.0
v0.57.0
v2016.*
v2016.07.29.00
v2016.08.01.00
v2016.08.08.00
v2016.08.15.00
v2016.08.22.00
v2016.08.29.00
v2016.09.05.00
v2016.09.12.00
v2016.09.12.01
v2016.09.19.00
v2016.09.26.00
v2016.10.03.00
v2016.10.10.00
v2016.10.17.00
v2016.10.24.00
v2016.10.31.00
v2016.11.07.00
v2016.11.14.00
v2016.11.21.00
v2016.11.28.00
v2016.12.05.00
v2016.12.12.00
v2016.12.19.00
v2017.*
v2017.03.06.00
v2017.03.13.00
v2017.03.20.00
v2017.03.27.00
v2017.04.03.00
v2017.04.10.00
v2017.04.17.00
v2017.04.24.00
v2017.05.01.00
v2017.05.08.00
v2017.05.15.00
v2017.05.22.00
v2017.05.29.00
v2017.06.05.00
v2017.06.12.00
v2017.06.19.00
v2017.06.26.00
v2017.06.26.01
v2017.07.03.00
v2017.07.10.00
v2017.07.17.00
v2017.07.17.01
v2017.07.24.00
v2017.07.31.00
v2017.08.07.00
v2017.08.14.00
v2017.08.21.00
v2017.08.28.00
v2017.09.04.00
v2017.09.11.00
v2017.09.18.00
v2017.09.25.00
v2017.10.02.00
v2017.10.09.00
v2017.10.16.00
v2017.10.23.00
v2017.10.30.00
v2017.11.06.00
v2017.11.13.00
v2017.11.20.00
v2017.11.27.00
v2017.12.04.00
v2017.12.11.00
v2017.12.18.00
v2017.12.25.00
v2018.*
v2018.01.01.00
v2018.01.08.00
v2018.01.15.00
v2018.01.22.00
v2018.01.29.00
v2018.02.05.00
v2018.02.12.00
v2018.02.19.00
v2018.02.26.00
v2018.03.05.00
v2018.03.12.00
v2018.03.19.00
v2018.03.26.00
v2018.04.02.00
v2018.04.09.00
v2018.04.16.00
v2018.04.23.00
v2018.04.30.00
v2018.05.07.00
v2018.05.14.00
v2018.05.21.00
v2018.05.28.00
v2018.06.04.00
v2018.06.11.00
v2018.06.18.00
v2018.06.25.00
v2018.07.02.00
v2018.07.09.00
v2018.07.16.00
v2018.07.23.00
v2018.07.30.00
v2018.08.06.00
v2018.08.09.00
v2018.08.13.00
v2018.08.20.00
v2018.08.27.00
v2018.09.03.00
v2018.09.03.01
v2018.09.10.00
v2018.09.10.01
v2018.09.17.00
v2018.09.24.00
v2018.10.01.00
v2018.10.08.00
v2018.10.15.00
v2018.10.22.00
v2018.10.29.00
v2018.11.05.00
v2018.11.12.00
v2018.11.19.00
v2018.11.26.00
v2018.12.03.00
v2018.12.10.00
v2018.12.17.00
v2018.12.24.00
v2018.12.31.00
v2019.*
v2019.01.07.00
v2019.01.14.00
v2019.01.21.00
v2019.01.28.00
v2019.02.04.00
v2019.02.11.00
v2019.02.18.00
v2019.02.25.00
v2019.03.04.00
v2019.03.18.00
v2019.03.25.00
v2019.04.01.00
v2019.04.08.00
v2019.04.15.00
v2019.04.22.00
v2019.04.29.00
v2019.05.06.00
v2019.05.13.00
v2019.05.20.00
v2019.05.27.00
v2019.06.03.00
v2019.06.10.00
v2019.06.17.00
v2019.07.22.00
v2019.07.29.00
v2019.08.05.00
v2019.08.12.00
v2019.08.19.00
v2019.08.26.00
v2019.09.02.00
v2019.09.09.00
v2019.09.16.00
v2019.09.23.00
v2019.09.30.00
v2019.10.07.00
v2019.10.14.00
v2019.10.21.00
v2019.10.28.00
v2019.11.04.00
v2019.11.11.00
v2019.12.02.00
v2019.12.06.00
v2019.12.09.00
v2019.12.16.00
v2019.12.23.00
v2019.12.30.00
v2020.*
v2020.01.06.00
v2020.01.13.00
v2020.01.20.00
v2020.01.27.00
v2020.02.03.00
v2020.02.10.00
v2020.02.17.00
v2020.02.24.00
v2020.03.02.00
v2020.03.09.00
v2020.03.16.00
v2020.03.23.00
v2020.03.30.00
v2020.04.06.00
v2020.04.13.00
v2020.04.20.00
v2020.04.27.00
v2020.05.04.00
v2020.05.11.00
v2020.05.18.00
v2020.05.25.00
v2020.06.01.00
v2020.06.08.00
v2020.06.15.00
v2020.06.29.00
v2020.07.06.00
v2020.07.13.00
v2020.07.20.00
v2020.07.27.00
v2020.08.03.00
v2020.08.10.00
v2020.08.17.00
v2020.08.24.00
v2020.08.31.00
v2020.09.07.00
v2020.09.14.00
v2020.09.21.00
v2020.09.28.00
v2020.10.05.00
v2020.10.12.00
v2020.10.19.00
v2020.10.26.00
v2020.11.02.00
v2020.11.09.00
v2020.11.16.00
v2020.11.23.00
v2020.11.30.00
v2020.12.07.00
v2020.12.14.00
v2020.12.21.00
v2020.12.28.00
v2021.*
v2021.01.04.00
v2021.01.11.00
v2021.01.18.00
v2021.01.18.01
v2021.01.25.00
v2021.02.01.00
v2021.02.08.00
v2021.02.15.00
v2021.02.22.00
v2021.03.01.00
v2021.03.08.00
v2021.03.15.00
v2021.03.22.00
v2021.03.29.00
v2021.04.05.00
v2021.04.12.00
v2021.04.19.00
v2021.04.26.00
v2021.05.03.00
v2021.05.10.00
v2021.05.17.00
v2021.05.24.00
v2021.05.31.00
v2021.06.07.00
v2021.06.14.00
v2021.06.28.00
v2021.07.20.00

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-24036.json"
vanir_signatures 
[
    {
        "deprecated": false,
        "digest": {
            "function_hash": "101058570026605353774289393375736795138",
            "length": 360
        },
        "id": "CVE-2021-24036-17b344a2",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/facebook/folly/commit/4f304af1411e68851bdd00ef6140e9de4616f7d3",
        "target": {
            "file": "folly/io/IOBuf.cpp",
            "function": "IOBuf::allocExtBuffer"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "300101381541353608386411837847654986997",
            "length": 1827
        },
        "id": "CVE-2021-24036-2e503417",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/facebook/folly/commit/4f304af1411e68851bdd00ef6140e9de4616f7d3",
        "target": {
            "file": "folly/io/IOBuf.cpp",
            "function": "IOBuf::reserveSlow"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "214184616704863287446728989058364003482",
            "length": 1072
        },
        "id": "CVE-2021-24036-578245ac",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/facebook/folly/commit/4f304af1411e68851bdd00ef6140e9de4616f7d3",
        "target": {
            "file": "folly/io/IOBuf.cpp",
            "function": "IOBuf::takeOwnership"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "329344432095125537012208963049625628710",
            "length": 366
        },
        "id": "CVE-2021-24036-6a8658b7",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/facebook/folly/commit/4f304af1411e68851bdd00ef6140e9de4616f7d3",
        "target": {
            "file": "folly/io/IOBuf.cpp",
            "function": "IOBuf::create"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "50115846751149371925064289565950926851",
            "length": 684
        },
        "id": "CVE-2021-24036-776139ec",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/facebook/folly/commit/4f304af1411e68851bdd00ef6140e9de4616f7d3",
        "target": {
            "file": "folly/io/IOBuf.cpp",
            "function": "IOBuf::createCombined"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "52239263734961977174785040469605375721",
                "319849633777966027214184640728511722891",
                "34162281867414031226333951757300532201",
                "125172318702899179195657077659418332634",
                "16071017778767037570949234878662773313",
                "321811930034665798064079429631649303090",
                "246444124007062249171465323954359758117",
                "106423856644633741907949336842080825250",
                "82503121539845531124952952977411060889",
                "247381825733154901336667013336791666014",
                "28782039112067873965861332156454313117",
                "247010329757180419608288412102583295243",
                "140078761327707120005032217094143773358",
                "308070994957449835460514789899718115846",
                "148492075258874548469797159159915041455",
                "268158873973047015658416489159597106743",
                "53331678438246198007797338930455607672",
                "188401522289084640319742330843155388954",
                "287358739990225511809245190632320532280",
                "64667938215618832501170431134117757239",
                "321131507378829844328748458004671879116",
                "166903389308416131953688715859250075986",
                "76841882018982662203122050418357594809",
                "308666152884786718551262641611181446939",
                "2588774276889978281487952515852303290",
                "298723673138749574280872872279935220331",
                "90716964481908994569817821248849082371",
                "26029772372989654309659415654802348539",
                "339208491430161115141517720867043387443",
                "251608118565192718071827358348293831558",
                "233381154501576139028008921805501247117",
                "151437079142317844872812566931569574775",
                "50643649638600030295830719641090782047",
                "229576969108587872341459648897439426209",
                "50509327755250814744071108958811135089",
                "236575291243415147758787809230781753486",
                "172517819203289891977927134210632426065",
                "201491267502863667879201496149660238521",
                "284748902179243510421409329627367018275",
                "43213066404036057274667765811703142818",
                "185330109400538506946867567257197992833"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2021-24036-8e360e31",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/facebook/folly/commit/4f304af1411e68851bdd00ef6140e9de4616f7d3",
        "target": {
            "file": "folly/io/IOBuf.cpp"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "31561007903021013281236246873911670821",
            "length": 266
        },
        "id": "CVE-2021-24036-a40e9623",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/facebook/folly/commit/4f304af1411e68851bdd00ef6140e9de4616f7d3",
        "target": {
            "file": "folly/io/IOBuf.cpp",
            "function": "operatornew"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "337643003984100835936664197559241203650",
            "length": 173
        },
        "id": "CVE-2021-24036-a7755e37",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/facebook/folly/commit/4f304af1411e68851bdd00ef6140e9de4616f7d3",
        "target": {
            "file": "folly/io/IOBuf.cpp",
            "function": "IOBuf::goodExtBufferSize"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "114798731947698060065795936817179347756",
                "154841872256927474148380982448796503352",
                "194291705344452442725467929845713381254",
                "71308228950659370311792278977926783856",
                "78204928507541149341241901047658725426",
                "290924255585921243093541540095107083025",
                "90286109302125220875274406629714619318",
                "13297911146688798534128212591770889240",
                "325832238661966953239174661567981587626",
                "146061943514538177213751487334670463882",
                "150891836941837679045139175488455778562",
                "116606084916169463880924096112267133863",
                "267240508263038221006009782693600222051",
                "172157468791754804754830239622103108653",
                "59183046581537088522243106125365981314",
                "109700770357253737814157723298644634304",
                "70521835751746735128063855031651923520",
                "165818866744174561288645335097621462031",
                "328024043231814014648999074644327487130",
                "213438922219079876235209259752045589154",
                "276515508553018500039407642207835408989",
                "278433795860250104221317822398714853295",
                "295863904860280388876186074631993998974",
                "243036559288267590729099795688238729369"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2021-24036-acfff15e",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/facebook/folly/commit/4baba28200d7446c870e96f3cdbeb492f54625d0",
        "target": {
            "file": "folly/io/Cursor.h"
        }
    }
]
vanir_signatures_modified 
"2026-10-22T07:19:00Z"