Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
UAF due to php_filter_float() failing
Vulnerability Description
In PHP versions 7.4.x below 7.4.28, 8.0.x below 8.0.16, and 8.1.x below 8.1.3, when using filter functions with FILTER_VALIDATE_FLOAT filter and min/max limits, if the filter fails, there is a possibility to trigger use of allocated memory after free, which can result it crashes, and potentially in overwrite of other memory chunks and RCE. This issue affects: code that uses FILTER_VALIDATE_FLOAT with min/max limits.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L
Vulnerability Type
释放后使用
Vulnerability Title
PHP 资源管理错误漏洞
Vulnerability Description
PHP是一种在服务器端执行的脚本语言。 php 存在资源管理错误漏洞，该漏洞源于 php_filter_float() 导致整数失败的 UAF。
CVSS Information
N/A
Vulnerability Type
N/A