Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Количество 17

Количество 17

ubuntu логотип

CVE-2026-7568

3 месяца назад

In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the metaphone() function in ext/standard/metaphone.c uses a signed int variable to track the current position within the input string. If a string longer than 2,147,483,647 bytes is passed, a signed integer overflow occurs, resulting in undefined behavior. This can lead to an out-of-bounds read, causing a segmentation fault or access to unrelated memory, and may affect the availability of the PHP process.

CVSS3: 7.5
EPSS: Низкий
redhat логотип

CVE-2026-7568

3 месяца назад

In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the metaphone() function in ext/standard/metaphone.c uses a signed int variable to track the current position within the input string. If a string longer than 2,147,483,647 bytes is passed, a signed integer overflow occurs, resulting in undefined behavior. This can lead to an out-of-bounds read, causing a segmentation fault or access to unrelated memory, and may affect the availability of the PHP process.

CVSS3: 7.5
EPSS: Низкий
nvd логотип

CVE-2026-7568

3 месяца назад

In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the metaphone() function in ext/standard/metaphone.c uses a signed int variable to track the current position within the input string. If a string longer than 2,147,483,647 bytes is passed, a signed integer overflow occurs, resulting in undefined behavior. This can lead to an out-of-bounds read, causing a segmentation fault or access to unrelated memory, and may affect the availability of the PHP process.

CVSS3: 7.5
EPSS: Низкий
msrc логотип

CVE-2026-7568

около 2 месяцев назад

Signed integer overflow in metaphone()

EPSS: Низкий
debian логотип

CVE-2026-7568

3 месяца назад

In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before ...

CVSS3: 7.5
EPSS: Низкий
github логотип

GHSA-96wq-48vp-hh57

3 месяца назад

Signed integer overflow in metaphone()

EPSS: Низкий
rocky логотип

RLSA-2026:22305

около 2 месяцев назад

Important: php:8.2 security update

EPSS: Низкий
rocky логотип

RLSA-2026:22143

около 2 месяцев назад

Important: php:8.2 security update

EPSS: Низкий
rocky логотип

RLSA-2026:22142

около 2 месяцев назад

Important: php:8.3 security update

EPSS: Низкий
oracle-oval логотип

ELSA-2026-22305

около 2 месяцев назад

ELSA-2026-22305: php:8.2 security update (IMPORTANT)

EPSS: Низкий
rocky логотип

RLSA-2026:23388

около 2 месяцев назад

Important: php security update

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2026:2091-1

2 месяца назад

Security update for php7

EPSS: Низкий
rocky логотип

RLSA-2026:22649

около 2 месяцев назад

Important: php8.4 security update

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2026:2037-1

2 месяца назад

Security update for php8

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2026:1958-1

2 месяца назад

Security update for php8

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2026:1957-1

2 месяца назад

Security update for php8

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2026:20745-1

3 месяца назад

Security update for php8

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2026-7568

In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the metaphone() function in ext/standard/metaphone.c uses a signed int variable to track the current position within the input string. If a string longer than 2,147,483,647 bytes is passed, a signed integer overflow occurs, resulting in undefined behavior. This can lead to an out-of-bounds read, causing a segmentation fault or access to unrelated memory, and may affect the availability of the PHP process.

CVSS3: 7.5
0%
Низкий
3 месяца назад
redhat логотип
CVE-2026-7568

In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the metaphone() function in ext/standard/metaphone.c uses a signed int variable to track the current position within the input string. If a string longer than 2,147,483,647 bytes is passed, a signed integer overflow occurs, resulting in undefined behavior. This can lead to an out-of-bounds read, causing a segmentation fault or access to unrelated memory, and may affect the availability of the PHP process.

CVSS3: 7.5
0%
Низкий
3 месяца назад
nvd логотип
CVE-2026-7568

In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the metaphone() function in ext/standard/metaphone.c uses a signed int variable to track the current position within the input string. If a string longer than 2,147,483,647 bytes is passed, a signed integer overflow occurs, resulting in undefined behavior. This can lead to an out-of-bounds read, causing a segmentation fault or access to unrelated memory, and may affect the availability of the PHP process.

CVSS3: 7.5
0%
Низкий
3 месяца назад
msrc логотип
CVE-2026-7568

Signed integer overflow in metaphone()

0%
Низкий
около 2 месяцев назад
debian логотип
CVE-2026-7568

In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before ...

CVSS3: 7.5
0%
Низкий
3 месяца назад
github логотип
GHSA-96wq-48vp-hh57

Signed integer overflow in metaphone()

0%
Низкий
3 месяца назад
rocky логотип
RLSA-2026:22305

Important: php:8.2 security update

около 2 месяцев назад
rocky логотип
RLSA-2026:22143

Important: php:8.2 security update

около 2 месяцев назад
rocky логотип
RLSA-2026:22142

Important: php:8.3 security update

около 2 месяцев назад
oracle-oval логотип
ELSA-2026-22305

ELSA-2026-22305: php:8.2 security update (IMPORTANT)

около 2 месяцев назад
rocky логотип
RLSA-2026:23388

Important: php security update

около 2 месяцев назад
suse-cvrf логотип
SUSE-SU-2026:2091-1

Security update for php7

2 месяца назад
rocky логотип
RLSA-2026:22649

Important: php8.4 security update

около 2 месяцев назад
suse-cvrf логотип
SUSE-SU-2026:2037-1

Security update for php8

2 месяца назад
suse-cvrf логотип
SUSE-SU-2026:1958-1

Security update for php8

2 месяца назад
suse-cvrf логотип
SUSE-SU-2026:1957-1

Security update for php8

2 месяца назад
suse-cvrf логотип
openSUSE-SU-2026:20745-1

Security update for php8

3 месяца назад

Уязвимостей на страницу