In PHP versions 7.3.x below 7.3.16 and 7.4.x below 7.4.4, while using mb_strtolower() function with UTF-32LE encoding, certain invalid strings could cause PHP to overwrite stack-allocated buffer. This could lead to memory corruption, crashes and potentially code execution.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: php
Published: 2020-04-01T03:35:13.554348Z
Updated: 2024-09-17T04:25:45.769Z
Reserved: 2020-01-15T00:00:00
Link: CVE-2020-7065
Vulnrichment
No data.
NVD
Status : Modified
Published: 2020-04-01T04:15:13.943
Modified: 2024-11-21T05:36:36.200
Link: CVE-2020-7065
Redhat