Количество 42
Количество 42
CVE-2025-14177
In PHP versions:8.1.* before 8.1.34, 8.2.* before 8.2.30, 8.3.* before 8.3.29, 8.4.* before 8.4.16, 8.5.* before 8.5.1, the getimagesize() function may leak uninitialized heap memory into the APPn segments (e.g., APP1) when reading images in multi-chunk mode (such as via php://filter). This occurs due to a bug in php_read_stream_all_chunks() that overwrites the buffer without advancing the pointer, leaving tail bytes uninitialized. This may lead to information disclosure of sensitive heap data and affect the confidentiality of the target server.
CVE-2025-14177
In PHP versions:8.1.* before 8.1.34, 8.2.* before 8.2.30, 8.3.* before 8.3.29, 8.4.* before 8.4.16, 8.5.* before 8.5.1, the getimagesize() function may leak uninitialized heap memory into the APPn segments (e.g., APP1) when reading images in multi-chunk mode (such as via php://filter). This occurs due to a bug in php_read_stream_all_chunks() that overwrites the buffer without advancing the pointer, leaving tail bytes uninitialized. This may lead to information disclosure of sensitive heap data and affect the confidentiality of the target server.
CVE-2025-14177
In PHP versions:8.1.* before 8.1.34, 8.2.* before 8.2.30, 8.3.* before 8.3.29, 8.4.* before 8.4.16, 8.5.* before 8.5.1, the getimagesize() function may leak uninitialized heap memory into the APPn segments (e.g., APP1) when reading images in multi-chunk mode (such as via php://filter). This occurs due to a bug in php_read_stream_all_chunks() that overwrites the buffer without advancing the pointer, leaving tail bytes uninitialized. This may lead to information disclosure of sensitive heap data and affect the confidentiality of the target server.
CVE-2025-14177
Information Leak of Memory in getimagesize
CVE-2025-14177
In PHP versions:8.1.* before 8.1.34, 8.2.* before 8.2.30, 8.3.* before ...
GHSA-3237-qqm7-mfv7
Information Leak of Memory in getimagesize
BDU:2026-02748
Уязвимость функции php_read_stream_all_chunks языка программирования PHP, позволяющая нарушителю получить доступ к конфиденциальным данным
ROS-20260514-73-0206
Уязвимость php 8.4
ROS-20260514-73-0205
Уязвимость php 8.3
ROS-20260514-73-0204
Уязвимость php 8.2
ROS-20260514-73-0001
Уязвимость php
ROS-20260429-80-0206
Уязвимость php 8.4
ROS-20260429-80-0205
Уязвимость php 8.3
ROS-20260429-80-0204
Уязвимость php 8.2
ROS-20260429-80-0002
Уязвимость php
RLSA-2026:2799
Moderate: php security update
ELSA-2026-2799
ELSA-2026-2799: php security update (MODERATE)
openSUSE-SU-2026:20113-1
Security update for php8
SUSE-SU-2026:0086-1
Security update for php8
SUSE-SU-2026:0071-1
Security update for php8
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2025-14177 In PHP versions:8.1.* before 8.1.34, 8.2.* before 8.2.30, 8.3.* before 8.3.29, 8.4.* before 8.4.16, 8.5.* before 8.5.1, the getimagesize() function may leak uninitialized heap memory into the APPn segments (e.g., APP1) when reading images in multi-chunk mode (such as via php://filter). This occurs due to a bug in php_read_stream_all_chunks() that overwrites the buffer without advancing the pointer, leaving tail bytes uninitialized. This may lead to information disclosure of sensitive heap data and affect the confidentiality of the target server. | CVSS3: 7.5 | 1% Низкий | 9 месяцев назад |
 | CVE-2025-14177 In PHP versions:8.1.* before 8.1.34, 8.2.* before 8.2.30, 8.3.* before 8.3.29, 8.4.* before 8.4.16, 8.5.* before 8.5.1, the getimagesize() function may leak uninitialized heap memory into the APPn segments (e.g., APP1) when reading images in multi-chunk mode (such as via php://filter). This occurs due to a bug in php_read_stream_all_chunks() that overwrites the buffer without advancing the pointer, leaving tail bytes uninitialized. This may lead to information disclosure of sensitive heap data and affect the confidentiality of the target server. | CVSS3: 3.7 | 1% Низкий | 9 месяцев назад |
 | CVE-2025-14177 In PHP versions:8.1.* before 8.1.34, 8.2.* before 8.2.30, 8.3.* before 8.3.29, 8.4.* before 8.4.16, 8.5.* before 8.5.1, the getimagesize() function may leak uninitialized heap memory into the APPn segments (e.g., APP1) when reading images in multi-chunk mode (such as via php://filter). This occurs due to a bug in php_read_stream_all_chunks() that overwrites the buffer without advancing the pointer, leaving tail bytes uninitialized. This may lead to information disclosure of sensitive heap data and affect the confidentiality of the target server. | CVSS3: 7.5 | 1% Низкий | 9 месяцев назад |
 | CVE-2025-14177 Information Leak of Memory in getimagesize | CVSS3: 3.7 | 1% Низкий | 9 месяцев назад |
| CVE-2025-14177 In PHP versions:8.1.* before 8.1.34, 8.2.* before 8.2.30, 8.3.* before ... | CVSS3: 7.5 | 1% Низкий | 9 месяцев назад |
| GHSA-3237-qqm7-mfv7 Information Leak of Memory in getimagesize | 1% Низкий | 9 месяцев назад | |
 | BDU:2026-02748 Уязвимость функции php_read_stream_all_chunks языка программирования PHP, позволяющая нарушителю получить доступ к конфиденциальным данным | CVSS3: 3.7 | 1% Низкий | 10 месяцев назад |
 | ROS-20260514-73-0206 Уязвимость php 8.4 | CVSS3: 3.7 | 1% Низкий | 4 месяца назад |
| ROS-20260514-73-0205 Уязвимость php 8.3 | CVSS3: 3.7 | 1% Низкий | 4 месяца назад |
| ROS-20260514-73-0204 Уязвимость php 8.2 | CVSS3: 3.7 | 1% Низкий | 4 месяца назад |
| ROS-20260514-73-0001 Уязвимость php | CVSS3: 3.7 | 1% Низкий | 4 месяца назад |
| ROS-20260429-80-0206 Уязвимость php 8.4 | CVSS3: 3.7 | 1% Низкий | 5 месяцев назад |
| ROS-20260429-80-0205 Уязвимость php 8.3 | CVSS3: 3.7 | 1% Низкий | 5 месяцев назад |
| ROS-20260429-80-0204 Уязвимость php 8.2 | CVSS3: 3.7 | 1% Низкий | 5 месяцев назад |
| ROS-20260429-80-0002 Уязвимость php | CVSS3: 3.7 | 1% Низкий | 5 месяцев назад |
 | RLSA-2026:2799 Moderate: php security update | 7 месяцев назад | ||
| ELSA-2026-2799 ELSA-2026-2799: php security update (MODERATE) | 7 месяцев назад | ||
 | openSUSE-SU-2026:20113-1 Security update for php8 | 8 месяцев назад | ||
| SUSE-SU-2026:0086-1 Security update for php8 | 9 месяцев назад | ||
| SUSE-SU-2026:0071-1 Security update for php8 | 9 месяцев назад |
Уязвимостей на страницу