6 matches found
PT-2022-36976
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a stack-buffer-overflow read error. The crash state indicates involvement of the BZ2 decompress and BZ2 bzDecompress functions, as...
PT-2020-22545
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of UNKNOWN READ. The crash state involves several function calls, including BZ2 decompress, BZ2 bzDecompress, and ft...
Internet Bug Bounty: Heap overflow due to integer overflow in bzdecompress() function
The fix for this bug has been committed: https://bugs.php.net/bug.php?id=73386 Description: ------------ I have found some vulnerable code at bzdecompress function in module Bzip2. bzdecompress function creates a new zendstring object to store decompressed data. The size of destination string...
PHP 'bzdecompress()' function integer overflow vulnerability
PHP is an open source general-purpose computer scripting language. An integer overflow vulnerability in the PHP 'bzdecompress' function allows an attacker to exploit the vulnerability to execute arbitrary code in the context of a user's affected application, or a failed attack will result in a...
