High severity7.5NVD Advisory· Published May 16, 2016· Updated Jun 17, 2026

CVE-2014-0236

Description

file before 5.18, as used in the Fileinfo component in PHP before 5.6.0, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a zero root_storage value in a CDF file, related to cdf.c and readcdf.c.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

PHP/PHP
cpe:2.3:a:php:php:*:*:*:*:*:*:*:*
Range: <=5.5.35
PHP/Fileinfollm-create
Range: <5.6.0
File Project/Filellm-fuzzy
Range: <5.18

Patches

Vulnerability mechanics

References

git.php.netnvd
php.net/ChangeLog-5.phpnvd
bugs.php.net/bug.phpnvd

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000