PHP

CVEs (751)

• CVE-2017-12933CriAug 18, 2017
  PHP

  PHP
  risk 0.64cvss 9.8epss 0.07

  The finish_nested_data function in ext/standard/var_unserializer.re in PHP before 5.6.31, 7.0.x before 7.0.21, and 7.1.x before 7.1.7 is prone to a buffer over-read while unserializing untrusted data. Exploitation of this issue can have an unspecified impact on the integrity of…

• CVE-2017-12932CriAug 18, 2017
  PHP

  PHP
  risk 0.64cvss 9.8epss 0.07

  ext/standard/var_unserializer.re in PHP 7.0.x through 7.0.22 and 7.1.x through 7.1.8 is prone to a heap use after free while unserializing untrusted data, related to improper use of the hash API for key deletion in a situation with an invalid array size. Exploitation of this…

• CVE-2017-11362CriJul 17, 2017
  PHP

  PHP
  risk 0.64cvss 9.8epss 0.03

  In PHP 7.x before 7.0.21 and 7.1.x before 7.1.7, ext/intl/msgformat/msgformat_parse.c does not restrict the locale length, which allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) or possibly have unspecified other impact…

• CVE-2016-4473CriJun 8, 2017
  PHP

  PHP
  risk 0.64cvss 9.8epss 0.08

  /ext/phar/phar_object.c in PHP 7.0.7 and 5.6.x allows remote attackers to execute arbitrary code. NOTE: Introduced as part of an incomplete fix to CVE-2015-6833.

• CVE-2017-9228CriMay 24, 2017
  PHP

  PHP
  risk 0.64cvss 9.8epss 0.06

  An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A heap out-of-bounds write occurs in bitset_set_range() during regular expression compilation due to an uninitialized variable from an incorrect state…

• CVE-2017-9227CriMay 24, 2017
  PHP

  PHP
  risk 0.64cvss 9.8epss 0.06

  An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A stack out-of-bounds read occurs in mbc_enc_len() during regular expression searching. Invalid handling of reg->dmin in forward_search_range() could…

• CVE-2017-9226CriMay 24, 2017
  PHP

  PHP
  risk 0.64cvss 9.8epss 0.08

  An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A heap out-of-bounds write or read occurs in next_state_val() during regular expression compilation. Octal numbers larger than 0xff are not handled…

• CVE-2017-9225CriMay 24, 2017
  PHP

  PHP
  risk 0.64cvss 9.8epss 0.03

  An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A stack out-of-bounds write in onigenc_unicode_get_case_fold_codes_by_str() occurs during regular expression compilation. Code point 0xFFFFFFFF is not…

• CVE-2017-9224CriMay 24, 2017
  PHP

  PHP
  risk 0.64cvss 9.8epss 0.07

  An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A stack out-of-bounds read occurs in match_at() during regular expression searching. A logical error involving order of validation and access in…

• CVE-2017-9119CriMay 21, 2017
  PHP

  PHP
  risk 0.64cvss 9.8epss 0.04

  The i_zval_ptr_dtor function in Zend/zend_variables.h in PHP 7.1.5 allows attackers to cause a denial of service (memory consumption and application crash) or possibly have unspecified other impact by triggering crafted operations on array data structures.

• CVE-2017-8923CriMay 12, 2017
  PHP

  PHP
  risk 0.64cvss 9.8epss 0.07

  The zend_string_extend function in Zend/zend_string.h in PHP through 7.1.5 does not prevent changes to string objects that result in a negative length, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact by…

• CVE-2016-9936CriJan 4, 2017
  PHP

  PHP
  risk 0.64cvss 9.8epss 0.04

  The unserialize implementation in ext/standard/var.c in PHP 7.x before 7.0.14 allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted serialized data. NOTE: this vulnerability exists because of an incomplete…

• CVE-2016-9935CriJan 4, 2017
  PHP

  PHP
  risk 0.64cvss 9.8epss 0.07

  The php_wddx_push_element function in ext/wddx/wddx.c in PHP before 5.6.29 and 7.x before 7.0.14 allows remote attackers to cause a denial of service (out-of-bounds read and memory corruption) or possibly have unspecified other impact via an empty boolean element in a wddxPacket…

• CVE-2016-9138CriJan 4, 2017
  PHP

  PHP
  risk 0.64cvss 9.8epss 0.04

  PHP through 5.6.27 and 7.x through 7.0.12 mishandles property modification during __wakeup processing, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted serialized data, as demonstrated by Exception::__toString with…

• CVE-2016-9137CriJan 4, 2017
  PHP

  PHP
  risk 0.64cvss 9.8epss 0.05

  Use-after-free vulnerability in the CURLFile implementation in ext/curl/curl_file.c in PHP before 5.6.27 and 7.x before 7.0.12 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted serialized data that is mishandled during…

• CVE-2016-8670CriJan 4, 2017
  Libgd

  Libgd
  risk 0.64cvss 9.8epss 0.05

  Integer signedness error in the dynamicGetbuf function in gd_io_dp.c in the GD Graphics Library (aka libgd) through 2.2.3, as used in PHP before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service (stack-based buffer overflow) or possibly have…

• CVE-2014-9912CriJan 4, 2017
  PHP

  PHP
  risk 0.64cvss 9.8epss 0.05

  The get_icu_disp_value_src_php function in ext/intl/locale/locale_methods.c in PHP before 5.3.29, 5.4.x before 5.4.30, and 5.5.x before 5.5.14 does not properly restrict calls to the ICU uresbund.cpp component, which allows remote attackers to cause a denial of service (buffer…

• CVE-2016-7568CriSep 28, 2016
  PHP

  PHP
  risk 0.64cvss 9.8epss 0.05

  Integer overflow in the gdImageWebpCtx function in gd_webp.c in the GD Graphics Library (aka libgd) through 2.2.3, as used in PHP through 7.0.11, allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via…

• CVE-2016-7417CriSep 17, 2016
  PHP

  PHP
  risk 0.64cvss 9.8epss 0.07

  ext/spl/spl_array.c in PHP before 5.6.26 and 7.x before 7.0.11 proceeds with SplArray unserialization without validating a return value and data type, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted serialized data.

• CVE-2016-7414CriSep 17, 2016
  PHP

  PHP
  risk 0.64cvss 9.8epss 0.07

  The ZIP signature-verification feature in PHP before 5.6.26 and 7.x before 7.0.11 does not ensure that the uncompressed_filesize field is large enough, which allows remote attackers to cause a denial of service (out-of-bounds memory access) or possibly have unspecified other…