PHP CGI SAPI 8.4.26 Pointer Underflow Remote Code Execution

PHP CGI SAPI versions 5.x through 8.4.26 reportedly contain a pointer underflow vulnerability in sapi/cgi/cgimain.c when cgi.fixpathinfo=1 is enabled. Manipulating PATHINFO with URL-encoded newline characters can trigger out-of-bounds pointer arithmetic, resulting in heap corruption and potential...