PHP CGI SAPI Pointer Underflow Remote Code Execution

PHP versions 5.x through 8.4.26 are reported to contain a pointer underflow vulnerability in the CGI SAPI when cgi.fixpathinfo is enabled. A missing bounds check during PATHINFO processing can result in out-of-bounds memory access, potentially allowing heap information disclosure, an ASLR bypass,...