CVE-2016-7479

Critical

Published: 12/01/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

All versions of PHP 7 have a vulnerability that during the unserialization process may lead to use-after-free when resizing the 'properties' hash table of a serialized object. A remote attacker may exploit this bug to gain arbitrary code execution.

Risk Assessment

The organization may be exposed to remote code execution, which can lead to serious security breaches and data loss.

Recommendation

It is recommended to update PHP to the latest version to eliminate this vulnerability and to monitor systems for unauthorized activities.

Original NVD description (English source)

In all versions of PHP 7, during the unserialization process, resizing the 'properties' hash table of a serialized object may lead to use-after-free. A remote attacker may exploit this bug to gain arbitrary code execution.