Out-of-bounds

In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, an error in the date extension's timelibmeridian parsing code could be used by attackers able to supply date strings to leak information from the interpreter, related to ext/date/lib/parsedate.c out-of-bounds reads affecting the...

CVE-2017-11145

CVE-2017-11145 affects PHP: vulnerable in PHP versions before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7. The date extension’s timelib_meridian parsing code in ext/date/lib/parse_date.c can trigger out-of-bounds reads in php_parse_date when supplied date strings, leaking information from t...