CVE-2016-7418

High

Published: 17/09/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The php_wddx_push_element function in PHP before 5.6.26 and 7.x before 7.0.11 allows remote attackers to cause a denial of service (invalid pointer access and out-of-bounds read) via an incorrect boolean element in a wddxPacket XML document, leading to mishandling in a wddx_deserialize call.

Risk Assessment

Attackers can exploit this vulnerability to disrupt application functionality, potentially leading to downtime and loss of service availability. Additionally, there is a risk of unspecified other impact on the system.

Recommendation

It is recommended to upgrade PHP to version 5.6.26 or 7.0.11 and later to mitigate this vulnerability. Also, monitor applications using WDDX for invalid input data.

Other vulnerabilities in PHP (przed wersją 5.6.26 oraz 7.x przed wersją 7.0.11)

CVE-2016-7413Critical
A use-after-free vulnerability in the wddx_stack_destroy function in PHP before 5.6.26 and 7.x before 7.0.11 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a wddxPacket XML document that lacks an end-tag for a recordset field element, leading to mishandling in a wddx_deserialize call.

Original NVD description (English source)

The php_wddx_push_element function in ext/wddx/wddx.c in PHP before 5.6.26 and 7.x before 7.0.11 allows remote attackers to cause a denial of service (invalid pointer access and out-of-bounds read) or possibly have unspecified other impact via an incorrect boolean element in a wddxPacket XML document, leading to mishandling in a wddx_deserialize call.