CVE-2021-21708 UAF due to php_filter_float() failing

In PHP versions 7.4.x below 7.4.28, 8.0.x below 8.0.16, and 8.1.x below 8.1.3, when using filter functions with FILTERVALIDATEFLOAT filter and min/max limits, if the filter fails, there is a possibility to trigger use of allocated memory after free, which can result it crashes, and potentially in...

PHP 8.1.x < 8.1.3 Use After Free Vulnerability

According to its self-reported version number, the version of PHP running on the remote web server is 7.4.x prior to 7.4.28, 8.0.x prior to 8.0.16 or 8.1.x prior to 8.1.3. It is, therefore, affected by a use after free vulnerability due to phpfilterfloat failing for ints. Note that the scanner ha...

Possible RCE when rendering untrusted user templates

Fix CVE-2022-0323, possible RCE when rendering untrusted user templates, reported by @altm4n via huntr.dev Improve compatibility with PHP 8.1...

Security fix for the ALT Linux 10 package php8.1 version 7.3.16-alt1

March 24, 2020 Anton Farygin 7.3.16-alt1 - 7.3.16 Fixes: CVE-2020-7064, CVE-2020-7065, CVE-2020-7066...