2 matches found
php: OOB read in grapheme_stripos and grapheme_strpos when negative offset is used
The graphemestrpos function in ext/intl/grapheme/graphemestring.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 allows remote attackers to cause a denial of service out-of-bounds read or possibly have unspecified other impact via a negative offset...
9.8CVSS7.4AI score0.06063EPSS
SaveExploits1References4
PT-2016-2083
Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.5.35 PHP versions 5.6.x prior to 5.6.21 PHP versions 7.x prior to 7.0.6 Description The issue allows remote attackers to cause a denial of service out-of-bounds read or possibly have unspecified other impact via a...
9.8CVSS0.56132EPSS
SaveExploits6References270
20