{"id":"CVE-2021-24036","details":"Passing an attacker controlled size when creating an IOBuf could cause integer overflow, leading to an out of bounds write on the heap with the possibility of remote code execution. This issue affects versions of folly prior to v2021.07.22.00. This issue affects HHVM versions prior to 4.80.5, all versions between 4.81.0 and 4.102.1, all versions between 4.103.0 and 4.113.0, and versions 4.114.0, 4.115.0, 4.116.0, 4.117.0, 4.118.0 and 4.118.1.","modified":"2026-10-22T07:19:00.465166945Z","published":"2021-07-23T01:15:07.073Z","database_specific":{"unresolved_ranges":[{"vendor_product":"facebook:hhvm","cpes":["cpe:2.3:a:facebook:hhvm:*:*:*:*:*:*:*:*"],"extracted_events":[{"source":"CPE_RANGE","range":[{"fixed":"4.80.5"},{"introduced":"4.81.0"},{"last_affected":"4.102.1"},{"introduced":"4.103.0"},{"last_affected":"4.113.0"}]}]},{"vendor_product":"facebook:hhvm","cpes":["cpe:2.3:a:facebook:hhvm:4.114.0:*:*:*:*:*:*:*","cpe:2.3:a:facebook:hhvm:4.115.0:*:*:*:*:*:*:*","cpe:2.3:a:facebook:hhvm:4.116.0:*:*:*:*:*:*:*","cpe:2.3:a:facebook:hhvm:4.117.0:*:*:*:*:*:*:*","cpe:2.3:a:facebook:hhvm:4.118.0:*:*:*:*:*:*:*","cpe:2.3:a:facebook:hhvm:4.118.1:*:*:*:*:*:*:*"],"extracted_events":[{"range":[{"introduced":"4.114.0"},{"last_affected":"4.114.0"},{"introduced":"4.115.0"},{"last_affected":"4.115.0"},{"introduced":"4.116.0"},{"last_affected":"4.116.0"},{"introduced":"4.117.0"},{"last_affected":"4.117.0"},{"introduced":"4.118.0"},{"last_affected":"4.118.0"},{"introduced":"4.118.1"},{"last_affected":"4.118.1"}],"source":"CPE_STRING"}]}]},"references":[{"type":"ADVISORY","url":"https://hhvm.com/blog/2021/07/20/security-update.html"},{"type":"ADVISORY","url":"https://www.facebook.com/security/advisories/cve-2021-24036"},{"type":"FIX","url":"https://github.com/facebook/folly/commit/4f304af1411e68851bdd00ef6140e9de4616f7d3"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/facebook/folly","events":[{"introduced":"0"},{"fixed":"4baba28200d7446c870e96f3cdbeb492f54625d0"},{"fixed":"4f304af1411e68851bdd00ef6140e9de4616f7d3"}],"database_specific":{"extracted_events":[{"range":[{"introduced":"0"},{"fixed":"2021.07.22.00"}],"source":"CPE_RANGE","cpe":"cpe:2.3:a:facebook:folly:*:*:*:*:*:*:*:*"},{"range":[{"fixed":"4f304af1411e68851bdd00ef6140e9de4616f7d3"}],"source":"REFERENCES_COMMIT"}]}}],"versions":["v2021.07.20.00","v2021.06.28.00","v2021.06.14.00","v2021.06.07.00","v2021.05.31.00","v2021.05.24.00","v2021.05.17.00","v2021.05.10.00","v2021.05.03.00","v2021.04.26.00","v2021.04.19.00","v2021.04.12.00","v2021.04.05.00","v2021.03.29.00","v2021.03.22.00","v2021.03.15.00","v2021.03.08.00","v2021.03.01.00","v2021.02.22.00","v2021.02.15.00","v2021.02.08.00","v2021.02.01.00","v2021.01.25.00","v2021.01.18.01","v2021.01.18.00","v2021.01.11.00","v2021.01.04.00","v2020.12.28.00","v2020.12.21.00","v2020.12.14.00","v2020.12.07.00","v2020.11.30.00","v2020.11.23.00","v2020.11.16.00","v2020.11.09.00","v2020.11.02.00","v2020.10.26.00","v2020.10.19.00","v2020.10.12.00","v2020.10.05.00","v2020.09.28.00","v2020.09.21.00","v2020.09.14.00","v2020.09.07.00","v2020.08.31.00","v2020.08.24.00","v2020.08.17.00","v2020.08.10.00","v2020.08.03.00","v2020.07.27.00","v2020.07.20.00","v2020.07.13.00","v2020.07.06.00","v2020.06.29.00","v2020.06.15.00","v2020.06.08.00","v2020.06.01.00","v2020.05.25.00","v2020.05.18.00","v2020.05.11.00","v2020.05.04.00","v2020.04.27.00","v2020.04.20.00","v2020.04.13.00","v2020.04.06.00","v2020.03.30.00","v2020.03.23.00","v2020.03.16.00","v2020.03.09.00","v2020.03.02.00","v2020.02.24.00","v2020.02.17.00","v2020.02.10.00","v2020.02.03.00","v2020.01.27.00","v2020.01.20.00","v2020.01.13.00","v2020.01.06.00","v2019.12.30.00","v2019.12.23.00","v2019.12.16.00","v2019.12.09.00","v2019.12.06.00","v2019.12.02.00","v2019.11.11.00","v2019.11.04.00","v2019.10.28.00","v2019.10.21.00","v2019.10.14.00","v2019.10.07.00","v2019.09.30.00","v2019.09.23.00","v2019.09.16.00","v2019.09.09.00","v2019.09.02.00","v2019.08.26.00","v2019.08.19.00","v2019.08.12.00","v2019.08.05.00","v2019.07.29.00","v2019.07.22.00","v2019.06.17.00","v2019.06.10.00","v2019.06.03.00","v2019.05.27.00","v2019.05.20.00","v2019.05.13.00","v2019.05.06.00","v2019.04.29.00","v2019.04.22.00","v2019.04.15.00","v2019.04.08.00","v2019.04.01.00","v2019.03.25.00","v2019.03.18.00","v2019.03.04.00","v2019.02.25.00","v2019.02.18.00","v2019.02.11.00","v2019.02.04.00","v2019.01.28.00","v2019.01.21.00","v2019.01.14.00","v2019.01.07.00","v2018.12.31.00","v2018.12.24.00","v2018.12.17.00","v2018.12.10.00","v2018.12.03.00","v2018.11.26.00","v2018.11.19.00","v2018.11.12.00","v2018.11.05.00","v2018.10.29.00","v2018.10.22.00","v2018.10.15.00","v2018.10.08.00","v2018.10.01.00","v2018.09.24.00","v2018.09.17.00","v2018.09.10.01","v2018.09.10.00","v2018.09.03.01","v2018.09.03.00","v2018.08.27.00","v2018.08.20.00","v2018.08.13.00","v2018.08.09.00","v2018.08.06.00","v2018.07.30.00","v2018.07.23.00","v2018.07.16.00","v2018.07.09.00","v2018.07.02.00","v2018.06.25.00","v2018.06.18.00","v2018.06.11.00","v2018.06.04.00","v2018.05.28.00","v2018.05.21.00","v2018.05.14.00","v2018.05.07.00","v2018.04.30.00","v2018.04.23.00","v2018.04.16.00","v2018.04.09.00","v2018.04.02.00","v2018.03.26.00","v2018.03.19.00","v2018.03.12.00","v2018.03.05.00","v2018.02.26.00","v2018.02.19.00","v2018.02.12.00","v2018.02.05.00","v2018.01.29.00","v2018.01.22.00","v2018.01.15.00","v2018.01.08.00","v2018.01.01.00","v2017.12.25.00","v2017.12.18.00","v2017.12.11.00","v2017.12.04.00","v2017.11.27.00","v2017.11.20.00","v2017.11.13.00","v2017.11.06.00","v2017.10.30.00","v2017.10.23.00","v2017.10.16.00","v2017.10.09.00","v2017.10.02.00","v2017.09.25.00","v2017.09.18.00","v2017.09.11.00","v2017.09.04.00","v2017.08.28.00","v2017.08.21.00","v2017.08.14.00","v2017.08.07.00","v2017.07.31.00","v2017.07.24.00","v2017.07.17.01","v2017.07.17.00","v2017.07.10.00","v2017.07.03.00","v2017.06.26.01","v2017.06.26.00","v2017.06.19.00","v2017.06.12.00","v2017.06.05.00","v2017.05.29.00","v2017.05.22.00","v2017.05.15.00","v2017.05.08.00","v2017.05.01.00","v2017.04.24.00","v2017.04.17.00","v2017.04.10.00","v2017.04.03.00","v2017.03.27.00","v2017.03.20.00","v2017.03.13.00","v2017.03.06.00","v2016.12.19.00","v2016.12.12.00","v2016.12.05.00","v2016.11.28.00","v2016.11.21.00","v2016.11.14.00","v2016.11.07.00","v2016.10.31.00","v2016.10.24.00","v2016.10.17.00","v2016.10.10.00","v2016.10.03.00","v2016.09.26.00","v2016.09.19.00","v2016.09.12.01","v2016.09.12.00","v2016.09.05.00","v2016.08.29.00","v2016.08.22.00","v2016.08.15.00","v2016.08.08.00","v2016.08.01.00","v2016.07.29.00","2016.07.26","deprecate-dynamic-initializer","v0.57.0","v0.56.0","v0.55.0","v0.54.0","v0.53.0","v0.52.0","v0.51.0","v0.50.0","v0.49.1","v0.49.0","v0.48.0","v0.47.0","v0.45.0","v0.43.0","v0.42.0","v0.41.0","v0.40.0","v0.39.0","v0.38.0","v0.37.0","v0.36.0","v0.35.0","v0.34.0","v0.33.0","v0.32.0","v0.31.0","v0.30.0","v0.29.0","v0.28.0","v0.27.0","v0.26.0","v0.25.0","v0.24.0","v0.23.0","v0.22.0"],"database_specific":{"vanir_signatures":[{"target":{"file":"folly/io/IOBuf.cpp","function":"IOBuf::allocExtBuffer"},"deprecated":false,"digest":{"length":360,"function_hash":"101058570026605353774289393375736795138"},"id":"CVE-2021-24036-17b344a2","signature_type":"Function","signature_version":"v1","source":"https://github.com/facebook/folly/commit/4f304af1411e68851bdd00ef6140e9de4616f7d3"},{"deprecated":false,"digest":{"function_hash":"300101381541353608386411837847654986997","length":1827},"id":"CVE-2021-24036-2e503417","signature_type":"Function","signature_version":"v1","source":"https://github.com/facebook/folly/commit/4f304af1411e68851bdd00ef6140e9de4616f7d3","target":{"file":"folly/io/IOBuf.cpp","function":"IOBuf::reserveSlow"}},{"digest":{"function_hash":"214184616704863287446728989058364003482","length":1072},"id":"CVE-2021-24036-578245ac","signature_type":"Function","signature_version":"v1","source":"https://github.com/facebook/folly/commit/4f304af1411e68851bdd00ef6140e9de4616f7d3","target":{"function":"IOBuf::takeOwnership","file":"folly/io/IOBuf.cpp"},"deprecated":false},{"id":"CVE-2021-24036-6a8658b7","signature_type":"Function","signature_version":"v1","source":"https://github.com/facebook/folly/commit/4f304af1411e68851bdd00ef6140e9de4616f7d3","target":{"file":"folly/io/IOBuf.cpp","function":"IOBuf::create"},"deprecated":false,"digest":{"function_hash":"329344432095125537012208963049625628710","length":366}},{"deprecated":false,"digest":{"function_hash":"50115846751149371925064289565950926851","length":684},"id":"CVE-2021-24036-776139ec","signature_type":"Function","signature_version":"v1","source":"https://github.com/facebook/folly/commit/4f304af1411e68851bdd00ef6140e9de4616f7d3","target":{"file":"folly/io/IOBuf.cpp","function":"IOBuf::createCombined"}},{"id":"CVE-2021-24036-8e360e31","signature_type":"Line","signature_version":"v1","source":"https://github.com/facebook/folly/commit/4f304af1411e68851bdd00ef6140e9de4616f7d3","target":{"file":"folly/io/IOBuf.cpp"},"deprecated":false,"digest":{"line_hashes":["52239263734961977174785040469605375721","319849633777966027214184640728511722891","34162281867414031226333951757300532201","125172318702899179195657077659418332634","16071017778767037570949234878662773313","321811930034665798064079429631649303090","246444124007062249171465323954359758117","106423856644633741907949336842080825250","82503121539845531124952952977411060889","247381825733154901336667013336791666014","28782039112067873965861332156454313117","247010329757180419608288412102583295243","140078761327707120005032217094143773358","308070994957449835460514789899718115846","148492075258874548469797159159915041455","268158873973047015658416489159597106743","53331678438246198007797338930455607672","188401522289084640319742330843155388954","287358739990225511809245190632320532280","64667938215618832501170431134117757239","321131507378829844328748458004671879116","166903389308416131953688715859250075986","76841882018982662203122050418357594809","308666152884786718551262641611181446939","2588774276889978281487952515852303290","298723673138749574280872872279935220331","90716964481908994569817821248849082371","26029772372989654309659415654802348539","339208491430161115141517720867043387443","251608118565192718071827358348293831558","233381154501576139028008921805501247117","151437079142317844872812566931569574775","50643649638600030295830719641090782047","229576969108587872341459648897439426209","50509327755250814744071108958811135089","236575291243415147758787809230781753486","172517819203289891977927134210632426065","201491267502863667879201496149660238521","284748902179243510421409329627367018275","43213066404036057274667765811703142818","185330109400538506946867567257197992833"],"threshold":0.9}},{"target":{"function":"operatornew","file":"folly/io/IOBuf.cpp"},"deprecated":false,"digest":{"length":266,"function_hash":"31561007903021013281236246873911670821"},"id":"CVE-2021-24036-a40e9623","signature_type":"Function","signature_version":"v1","source":"https://github.com/facebook/folly/commit/4f304af1411e68851bdd00ef6140e9de4616f7d3"},{"source":"https://github.com/facebook/folly/commit/4f304af1411e68851bdd00ef6140e9de4616f7d3","target":{"function":"IOBuf::goodExtBufferSize","file":"folly/io/IOBuf.cpp"},"deprecated":false,"digest":{"function_hash":"337643003984100835936664197559241203650","length":173},"id":"CVE-2021-24036-a7755e37","signature_type":"Function","signature_version":"v1"},{"target":{"file":"folly/io/Cursor.h"},"deprecated":false,"digest":{"line_hashes":["114798731947698060065795936817179347756","154841872256927474148380982448796503352","194291705344452442725467929845713381254","71308228950659370311792278977926783856","78204928507541149341241901047658725426","290924255585921243093541540095107083025","90286109302125220875274406629714619318","13297911146688798534128212591770889240","325832238661966953239174661567981587626","146061943514538177213751487334670463882","150891836941837679045139175488455778562","116606084916169463880924096112267133863","267240508263038221006009782693600222051","172157468791754804754830239622103108653","59183046581537088522243106125365981314","109700770357253737814157723298644634304","70521835751746735128063855031651923520","165818866744174561288645335097621462031","328024043231814014648999074644327487130","213438922219079876235209259752045589154","276515508553018500039407642207835408989","278433795860250104221317822398714853295","295863904860280388876186074631993998974","243036559288267590729099795688238729369"],"threshold":0.9},"id":"CVE-2021-24036-acfff15e","signature_type":"Line","signature_version":"v1","source":"https://github.com/facebook/folly/commit/4baba28200d7446c870e96f3cdbeb492f54625d0"}],"vanir_signatures_modified":"2026-10-22T07:19:00Z","source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-24036.json"}}],"schema_version":"1.9.2","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}