Unrated severityNVD Advisory· Published Jul 31, 2026
Debian php8.2: Attacker-provided inputs to bccomp() could lead to an out-of-bounds write with s…
CVE-2026-17544
Description
Attacker-provided inputs to bccomp() could lead to an out-of-bounds write with stack and heap corruption in PHP versions from 8.4.* before 8.4.24 and from 8.5.* before 8.5.9.
Affected products
2Patches
Vulnerability mechanics
News mentions
1- PHP Patches Three Flaws Enabling SQL Injection, Memory Corruption and Server CrashesCyber Security News · Jul 31, 2026