CVE-2024-8929
MediumSummary
Vulnerability in PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14. A hostile MySQL server can cause the client to disclose the content of its heap containing data from other SQL requests and possible other data belonging to different users of the same server.
Risk Assessment
An attacker controlling the MySQL server can steal sensitive data from the PHP client's memory, including data from other users.
Recommendation
Update PHP to version 8.1.31, 8.2.26, 8.3.14 or later. Use trusted MySQL servers.
Original NVD description (English source)
In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, a hostile MySQL server can cause the client to disclose the content of its heap containing data from other SQL requests and possible other data belonging to different users of the same server.