CVE Catalog
CVE-2024-11236
MediumSummary
In PHP versions 8.1.x before 8.1.31, 8.2.x before 8.2.26, 8.3.x before 8.3.14, uncontrolled long string inputs to the ldap_escape() function on 32-bit systems can cause an integer overflow, resulting in an out-of-bounds write.
Risk Assessment
An attacker could exploit this vulnerability to corrupt memory, potentially leading to application crashes or arbitrary code execution.
Recommendation
It is recommended to upgrade PHP to versions 8.1.31, 8.2.26, 8.3.14 or later.
Original NVD description (English source)
In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, uncontrolled long string inputs to ldap_escape() function on 32-bit systems can cause an integer overflow, resulting in an out-of-bounds write.