---
id: 4139
title: "[CVE-2020-13656] OOB to RCE: Exploitation of the Hobbes Functional Interpreter"
cve: CVE-2020-13656
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/exploit-of-hobbes-functional-interpreter-advisory"
published_at: "2020-06-12T00:00:00Z"
tags: ["rce", "open-source", "exploit", "memory-corruption", "cve-2020-13656", "interpreter"]
phying_url: "https://phying.com/item/4139"
lang: en
---

# [CVE-2020-13656] OOB to RCE: Exploitation of the Hobbes Functional Interpreter

## Summary

Jake Miller details CVE-2020-13656 in Morgan Stanley's Hobbes interpreter: missing array bounds checking yields an out-of-bounds read/write primitive leading to local and remote code execution.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **CVE:** CVE-2020-13656
- **Published:** 2020-06-12T00:00:00Z
- **Original:** https://bishopfox.com/blog/exploit-of-hobbes-functional-interpreter-advisory
- **Phying News:** https://phying.com/item/4139