VYPR
← All advisories
Critical severity9.8OSV Advisory· Published Feb 22, 2019· Updated Jun 17, 2026

CVE-2019-9025

CVE-2019-9025

Description

An issue was discovered in PHP 7.3.x before 7.3.1. An invalid multibyte string supplied as an argument to the mb_split() function in ext/mbstring/php_mbregex.c can cause PHP to execute memcpy() with a negative argument, which could read and write past buffers allocated for the data.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • PHP/PHPOSV3 versions
    (expand)+ 2 more
    • (no CPE)
    • cpe:2.3:a:php:php:*:*:*:*:*:*:*:*range: >=7.3.0,<7.3.1
    • (no CPE)range: <7.3.1
  • NetApp/Storage Automation Store
    cpe:2.3:a:netapp:storage_automation_store:-:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.