Internet Bug Bounty: Heap overflow due to integer overflow in bzdecompress() function

The fix for this bug has been committed: https://bugs.php.net/bug.php?id=73386 Description: ------------ I have found some vulnerable code at bzdecompress function in module Bzip2. bzdecompress function creates a new zendstring object to store decompressed data. The size of destination string...

PHP 'bzdecompress()' function integer overflow vulnerability

PHP is an open source general-purpose computer scripting language. An integer overflow vulnerability in the PHP 'bzdecompress' function allows an attacker to exploit the vulnerability to execute arbitrary code in the context of a user's affected application, or a failed attack will result in a...

Internet Bug Bounty: integer overflow in bzdecompress caused heap corruption

Please check: https://bugs.php.net/bug.php?id=72837...