CVE-2024-11233

Medium

Published: —Translated: 27/07/2026(UTC)NVD NIST

Summary

In PHP versions 8.1.x before 8.1.31, 8.2.x before 8.2.26, 8.3.x before 8.3.14, the convert.quoted-printable-decode filter can cause a buffer overread by one byte, potentially leading to crashes or disclosure of other memory areas.

Risk Assessment

An attacker could exploit this vulnerability to read sensitive data from memory or cause application crashes.

Recommendation

It is recommended to upgrade PHP to versions 8.1.31, 8.2.26, 8.3.14 or later.

Original NVD description (English source)

In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, due to an error in convert.quoted-printable-decode filter certain data can lead to buffer overread by one byte, which can in certain circumstances lead to crashes or disclose content of other memory areas.