Back to CVE List

CVE-2026-17544

Vulnerability Description

Attacker-provided inputs to bccomp() could lead to an out-of-bounds write with stack and heap corruption in PHP versions from 8.4.* before 8.4.24 and from 8.5.* before 8.5.9.

Vulnerability Details

Published Date
Last Modified
CWE ID
CWE-787
Source
NVD
Vendor
PHP Group
Product
PHP

External References

Discussion (0)

Add Comment

No comments yet. Be the first!