1 matches found
Internet Bug Bounty: Buffer over-write in finfo_open with malformed magic file.
https://bugs.php.net/bug.php?id=71527 This bug causes a segfault when running with environment variable USEZENDALLOC set to 0, and also when compiled with ASAN with USEZENDALLOC set and unset. To reproduce, run the following PHP file, with the example magic file below. $ cat magic-open.php Magic...
7.5CVSS8.6AI score0.04985EPSS
SaveExploits1
20