EUVD-2019-18412

Malware in sbrugna...

SUSE CVE-2019-9025

An issue was discovered in PHP 7.3.x before 7.3.1. An invalid multibyte string supplied as an argument to the mbsplit function in ext/mbstring/phpmbregex.c can cause PHP to execute memcpy with a negative argument, which could read and write past buffers allocated for the data...

CVE-2019-9025

An issue was discovered in PHP 7.3.x before 7.3.1. An invalid multibyte string supplied as an argument to the mbsplit function in ext/mbstring/phpmbregex.c can cause PHP to execute memcpy with a negative argument, which could read and write past buffers allocated for the data...

PHP 7.3.0 Memory Corruption Vulnerability - Linux

An invalid multibyte string supplied as an argument to the mbsplit function in ext/mbstring/phpmbregex.c can cause PHP to execute memcpy with a negative argument, which could read and write past buffers allocated for the data. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might...

CVE-2019-9025

An issue was discovered in PHP 7.3.x before 7.3.1. An invalid multibyte string supplied as an argument to the mbsplit function in ext/mbstring/phpmbregex.c can cause PHP to execute memcpy with a negative argument, which could read and write past buffers allocated for the data...

Code injection

An issue was discovered in PHP 7.3.x before 7.3.1. An invalid multibyte string supplied as an argument to the mbsplit function in ext/mbstring/phpmbregex.c can cause PHP to execute memcpy with a negative argument, which could read and write past buffers allocated for the data...

CVE-2019-9025

CVE-2019-9025 affects PHP 7.3.x before 7.3.1. An invalid multibyte string passed to mb_split() in ext/mbstring/php_mbregex.c can cause memcpy() to be called with a negative argument, allowing read/write past allocated buffers and potential crash. Remediation per sources is to upgrade to a fixed P...

Internet Bug Bounty: Negative size parameter in mb_split

https://bugs.php.net/bug.php?id=77367 mbsplit doesn't correctly detect the length when the $string has an unfinished multibyte character at the end of the string. This causes a crash due to a negative parameter to addnextindexstringl, which calls zendstringinit and memcpy. Could reproduce on...