OSV-2021-1199

    Dashboard / Vulnerabilities / OSV-2021-1199

    OSV-2021-1199

    Published: 4 Sept 2021Last Modified: 26 May 2023

    Summary: Heap-use-after-free in i_zval_ptr_dtor

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38001 ``` Crash type: Heap-use-after-free READ 1 Crash state: i_zval_ptr_dtor concat_function zend_binary_op ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38001

    Affected packages

    Package

    Name: php

    Purl: pkg:generic/php

    Affected ranges

    Type: GIT

    Events:

    Introduced- 1902f730ee2bda60552f34c0643e2d7b47e4fb64
    Fixed -24ff7eee3f04070d8ab1b31f57d17f0c840185bf

    Affected versions

    php-8.1.0
    php-8.1.2RC1
    php-8.1.3
    php-8.1.4RC1
    php-8.1.7RC1

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2021-1199 | CVE-DB