Orta CVSS 6.5
CVE-2025-14181: Php: tamsayı taşması
Açıklama (NVD)
The SOAP HTTP client guards its response buffer growth with a check that relies on signed integer overflow, which is undefined behaviour and is not guaranteed to trigger. When the check is optimised away, a malicious SOAP server can make the client allocate a buffer far smaller than the data it then writes into it, producing a heap buffer overflow.
Özet bilgiler
- Ürün
- Php Php
- CVSS v3.1
- 6.5
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H - EPSS
- %0,31 (yüzdelik 24)
- CWE
- CWE-190
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| php-php | 8.2.0 | — | 8.2.34 |
| php-php | 8.3.0 | — | 8.3.35 |
| php-php | 8.4.0 | — | 8.4.26 |
| php-php | 8.5.0 | — | 8.5.11 |