CVE Catalog
CVE-2016-4346
CriticalSummary
Integer overflow in the str_pad function in PHP before 7.0.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a long string, leading to a heap-based buffer overflow.
Risk Assessment
Attackers may exploit this vulnerability to disrupt application functionality, potentially leading to service outages.
Recommendation
It is recommended to upgrade PHP to version 7.0.4 or later to mitigate the risks associated with this vulnerability.
Original NVD description (English source)
Integer overflow in the str_pad function in ext/standard/string.c in PHP before 7.0.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a long string, leading to a heap-based buffer overflow.