VYPR
← All advisories
High severity7.5NVD Advisory· Published May 16, 2016· Updated May 6, 2026

CVE-2014-0236

CVE-2014-0236

Description

file before 5.18, as used in the Fileinfo component in PHP before 5.6.0, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a zero root_storage value in a CDF file, related to cdf.c and readcdf.c.

Affected products

1
  • PHP/PHP
    cpe:2.3:a:php:php:*:*:*:*:*:*:*:*
    Range: <=5.5.35

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

3

News mentions

0

No linked articles in our index yet.