Show filters
1 Total Results
Displaying 1-1 of 1
Sort by:
Attacker Value
Low
CVE-2020-7065
Disclosure Date: March 17, 2020 (last updated October 06, 2023)
In PHP versions 7.3.x below 7.3.16 and 7.4.x below 7.4.4, while using mb_strtolower() function with UTF-32LE encoding, certain invalid strings could cause PHP to overwrite stack-allocated buffer. This could lead to memory corruption, crashes and potentially code execution.
0
