Beveiligingsadvies

CVE-2020-7065

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2020-04-01 03:35:13

Laatst bijgewerkt 2024-09-17 04:25:45

Toegewezen door php

CVSS-score 7.4

Status PUBLISHED

Beschrijving

In PHP versions 7.3.x below 7.3.16 and 7.4.x below 7.4.4, while using mb_strtolower() function with UTF-32LE encoding, certain invalid strings could cause PHP to overwrite stack-allocated buffer. This could lead to memory corruption, crashes and potentially code execution.

← Alle CVE's bekijken Bekijk op cve.org ↗