CVE-2019-9025

CVE-2019-9025 affects PHP 7.3.x before 7.3.1. An invalid multibyte string passed to mb_split() in ext/mbstring/php_mbregex.c can cause memcpy() to be called with a negative argument, allowing read/write past allocated buffers and potential crash. Remediation per sources is to upgrade to a fixed P...