Critical severity9.8NVD Advisory· Published May 16, 2016· Updated Jun 17, 2026
CVE-2015-4116
CVE-2015-4116
Description
Use-after-free vulnerability in the spl_ptr_heap_insert function in ext/spl/spl_heap.c in PHP before 5.5.27 and 5.6.x before 5.6.11 allows remote attackers to execute arbitrary code by triggering a failed SplMinHeap::compare operation.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
26cpe:2.3:a:php:php:*:*:*:*:*:*:*:*+ 12 more
- cpe:2.3:a:php:php:*:*:*:*:*:*:*:*range: <=5.5.26
- cpe:2.3:a:php:php:5.6.0:*:*:*:*:*:*:*
- cpe:2.3:a:php:php:5.6.1:*:*:*:*:*:*:*
- cpe:2.3:a:php:php:5.6.10:*:*:*:*:*:*:*
- cpe:2.3:a:php:php:5.6.2:*:*:*:*:*:*:*
- cpe:2.3:a:php:php:5.6.3:*:*:*:*:*:*:*
- cpe:2.3:a:php:php:5.6.4:*:*:*:*:*:*:*
- cpe:2.3:a:php:php:5.6.5:*:*:*:*:*:*:*
- cpe:2.3:a:php:php:5.6.6:*:*:*:*:*:*:*
- cpe:2.3:a:php:php:5.6.7:*:*:*:*:*:*:*
- cpe:2.3:a:php:php:5.6.8:*:*:*:*:*:*:*
- cpe:2.3:a:php:php:5.6.9:*:*:*:*:*:*:*
- (no CPE)range: <5.5.27, <5.6.11
- osv-coords12 versionspkg:rpm/suse/php53&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP2-LTSSpkg:rpm/suse/php53&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-LTSSpkg:rpm/suse/php53&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-TERADATApkg:rpm/suse/php53&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4pkg:rpm/suse/php53&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4pkg:rpm/suse/php53&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP4pkg:rpm/suse/php53&distro=SUSE%20Manager%202.1pkg:rpm/suse/php53&distro=SUSE%20Manager%20Proxy%202.1pkg:rpm/suse/php53&distro=SUSE%20OpenStack%20Cloud%205pkg:rpm/suse/php5&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Web%20and%20Scripting%2012pkg:rpm/suse/php5&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012pkg:rpm/suse/php5&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP1
< 5.3.17-47.1+ 11 more
- (no CPE)range: < 5.3.17-47.1
- (no CPE)range: < 5.3.17-71.1
- (no CPE)range: < 5.3.17-71.1
- (no CPE)range: < 5.3.17-71.1
- (no CPE)range: < 5.3.17-71.1
- (no CPE)range: < 5.3.17-71.1
- (no CPE)range: < 5.3.17-71.1
- (no CPE)range: < 5.3.17-71.1
- (no CPE)range: < 5.3.17-71.1
- (no CPE)range: < 5.5.14-59.2
- (no CPE)range: < 5.5.14-59.2
- (no CPE)range: < 5.5.14-59.2
Patches
Vulnerability mechanics
References
5News mentions
0No linked articles in our index yet.