What the vulnerability does

01Description

A Malformed h2 frame can cause 'std::out_of_range' exception when parsing priority meta data. This behavior can lead to denial-of-service. This affects all supported versions of HHVM (3.25.2, 3.24.6, and 3.21.10 and below) when using the proxygen server to handle HTTP2 requests.

Key dates

02Disclosure timeline

December 31, 2018 CVE published
May 6, 2025 Record updated