The vulnerability of the `get_icu_value_internal` function in the PHP programming language allows a perpetrator to trigger a service failure or possibly cause other effects.

The vulnerability of the geticuvalueinternal function in the PHP programming language is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions or potentially cause other adverse effects...

php: improper nul termination leading to out-of-bounds read in get_icu_value_internal

The geticuvalueinternal function in ext/intl/locale/localemethods.c in PHP before 5.5.36, 5.6.x before 5.6.22, and 7.x before 7.0.7 does not ensure the presence of a '\0' character, which allows remote attackers to cause a denial of service out-of-bounds read or possibly have unspecified other...

Internet Bug Bounty: get_icu_value_internal out-of-bounds read

https://bugs.php.net/bug.php?id=72241 Absence of null character terminator causes unexpected zendstring length and leaks heap memory when using several intl functions that commonly receive user input: - localecanonicalize - localefiltermatches - localelookup - localeparse - localegetprimarylangua...

PHP 5.5.12 - Locale::parseLocale Memory Corruption

PHP 5.5.12 - Locale::parseLocale Memory Corruption Full Package: https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/35358.tgz Description: ------------ PHP 5.5.12 suffers from a memory corruption vulnerability that could potentially be exploited to achieve remote...