PHP Group vulnerabilities
104 CVEs and advisories name PHP Group as an affected vendor, 3 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2023-0662DoS vulnerability when parsing multipart request body
- CVE-2023-0567password_verify() always returns true for some invalid hashes
- CVE-2022-31630OOB read due to insufficient input validation in imageloadfont()
- CVE-2022-31629$_COOKIE names string replacement (. -> _): cookie integrity vulnerabilities
- CVE-2022-31628phar wrapper can occur dos when using quine gzip file
- CVE-2022-31627Heap buffer overflow in finfo_buffer
- CVE-2022-31626mysqlnd/pdo password buffer overflow
- CVE-2022-31625Freeing unallocated memory in php_pgsql_free_params()
- CVE-2021-21708UAF due to php_filter_float() failing
- CVE-2021-21707Special characters break path parsing in XML functions
- CVE-2021-21703PHP-FPM memory access in root process leading to privilege escalation
- CVE-2021-21706ZipArchive::extractTo may extract outside of destination dir
- CVE-2021-21705Incorrect URL validation in FILTER_VALIDATE_URL
- CVE-2021-21704Multiple vulnerabilities in Firebird client extension
- CVE-2021-21702Null Dereference in SoapClient
- CVE-2020-7071FILTER_VALIDATE_URL accepts URLs with invalid userinfo
- CVE-2020-7070PHP parses encoded cookie names so malicious `__Host-` cookies can be sent
- CVE-2020-7069Wrong ciphertext/tag in AES-CCM encryption for a 12 bytes IV
- CVE-2020-7068Use of freed hash key in the phar_parse_zipfile function
- CVE-2019-11048Temporary files are not cleaned after OOM when parsing HTTP request data
- CVE-2020-7067OOB Read in urldecode()
- CVE-2020-7066get_headers() silently truncates after a null byte
- CVE-2020-7065mb_strtolower (UTF-32LE): stack-buffer-overflow at php_unicode_tolower_full
- CVE-2020-7064Use-of-uninitialized-value in exif
- CVE-2020-7063Files added to tar with Phar::buildFromIterator have all-access permissions
- CVE-2020-7062Null Pointer Dereference in PHP Session Upload Progress
- CVE-2020-7061heap-buffer-overflow in phar_extract_file
- CVE-2020-7060global buffer-overflow in mbfl_filt_conv_big5_wchar
- CVE-2020-7059OOB read in php_strip_tags_ex
- CVE-2019-11050Use-after-free in exif parsing under memory sanitizer