CVE-2016-4540
CriticalSummary
The grapheme_stripos function in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a negative offset.
Risk Assessment
The organization may be vulnerable to attacks that lead to denial of service, potentially affecting the availability of PHP-based applications and systems.
Recommendation
It is recommended to update PHP to the latest version to mitigate this vulnerability and to monitor systems for unauthorized access attempts.
Original NVD description (English source)
The grapheme_stripos function in ext/intl/grapheme/grapheme_string.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a negative offset.