BIT-PHP-MIN-2021-21708 UAF due to php_filter_float() failing

🗓️ 14 Jan 2025 19:22:11Reported by GoogleType

osv🔗 osv.dev👁 10 Views

Vulnerabilities in PHP filter functions could lead to memory issues and remote code execution risks.

Reporter	Title	Published	Views	Family All 152
ALT Linux	Security fix for the ALT Linux 10 package php8.0 version 8.0.16-alt1	28 Feb 202200:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package php7 version 7.4.28-alt1	1 Mar 202200:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package php8.1 version 8.1.3-alt1	28 Feb 202200:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package php8.2 version 8.1.3-alt1	19 Feb 202200:00	–	altlinux
IBM Security Bulletins	Security Bulletin: Vulnerabilities in PHP may affect IBM Spectrum Sentinel Anomaly Scan Engine (CVE-2021-21703, CVE-2021-21708, CVE-2021-21707, CVE-2022-31629, CVE-2022-31628)	16 Dec 202217:01	–	ibm
Tenable Nessus	Amazon Linux 2022 : php, php-bcmath, php-cli (ALAS2022-2022-073)	6 Sep 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2022 : php, php-bcmath, php-cli (ALAS2022-2022-085)	6 Sep 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2 : php (ALASPHP8.0-2023-007)	13 Sep 202300:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0018: php:7.4 (ALINUX3-SA-2023:0018)	14 May 202500:00	–	nessus
Tenable Nessus	AlmaLinux 8 : php:8.0 (ALSA-2022:7624)	14 Nov 202200:00	–	nessus

Source	Link
bugs	www.bugs.php.net/bug.php
security	www.security.gentoo.org/glsa/202209-20
security	www.security.netapp.com/advisory/ntap-20220325-0004/
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-21708

11 Aug 2025 15:13Current

9.5High risk

Vulners AI Score9.5

CVSS 26.8

CVSS 3.18.2 - 9.8

EPSS0.03002