CVE-2024-11233
In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, due to an error in convert.quoted-printable-decode filter certain data can lead to buffer overread by one byte, which can in certain circumstances lead to crashes or disclose content of other memory areas.
- Score
- CVSS 3.1 8.2 High
- Status
- Modified - security@php.net
- Published
- 2024-11-24
- Last modified
- 2025-11-03
- Weaknesses
- CWE-122, CWE-787
Affected products
References
- https://github.com/php/php-src/security/advisories/GHSA-r977-prxv-hc43
- https://lists.debian.org/debian-lts-announce/2024/12/msg00007.html
- https://security.netapp.com/advisory/ntap-20241220-0008/
