An issue was discovered in PHP 7.3.x before 7.3.1. An invalid multibyte string supplied as an argument to the mb_split() function in ext/mbstring/php_mbregex.c can cause PHP to execute memcpy() with a negative argument, which could read and write past buffers allocated for the data.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Huawei Euleros 2_0_sp8 | — | Upgrade phpUpgrade php-processUpgrade php-xmlrpcUpgrade php-gdUpgrade php-recodeUpgrade php-soapUpgrade php-ldapUpgrade php-fpmUpgrade php-pdoUpgrade php-odbcUpgrade php-commonUpgrade php-xmlUpgrade php-cli | Aug 31, 2020 | Feb 22, 2019 |
| Php | — | Upgrade to PHP version 7.3.1 | Apr 22, 2019 | Feb 22, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub