SUSE CVE-2016-5093

The geticuvalueinternal function in ext/intl/locale/localemethods.c in PHP before 5.5.36, 5.6.x before 5.6.22, and 7.x before 7.0.7 does not ensure the presence of a '\0' character, which allows remote attackers to cause a denial of service out-of-bounds read or possibly have unspecified other...

php: improper nul termination leading to out-of-bounds read in get_icu_value_internal

The geticuvalueinternal function in ext/intl/locale/localemethods.c in PHP before 5.5.36, 5.6.x before 5.6.22, and 7.x before 7.0.7 does not ensure the presence of a '\0' character, which allows remote attackers to cause a denial of service out-of-bounds read or possibly have unspecified other...

Internet Bug Bounty: Illegal write access through Locale methods

Upstream Bug --- https://bugs.php.net/bug.php?id=73248 Summary -- The functions localegetallvariants and localegetprimarylanguage do not validate the length of the locale name supplied, this causes an integer overflow inside ulocimpgetLanguage, since it uses int32t type as index, and strings with...