1 matches found
php: wddx_deserialize() heap out-of-bound read via php_parse_date()
In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, an error in the date extension's timelibmeridian parsing code could be used by attackers able to supply date strings to leak information from the interpreter, related to ext/date/lib/parsedate.c out-of-bounds reads affecting the...
7.5CVSS7.2AI score0.04812EPSS
SaveExploits0References4
20