Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2017/07/12 10:27 a.m.72 views

Internet Bug Bounty: PHP WDDX Deserialization Heap OOB Read in timelib_meridian()

Description: While deserializing an invalid dateTime value, wddxdeserialize would result in a heap out-of-bounds read in timelibmeridian. As wddxdeserialize is exposed to network data, and sometimes echo the results back to client, this issue could potentially allow remote peeking of the process...

5CVSS8.4AI score0.04812EPSS
SaveExploits0
Rows per page
Query Builder