CVE Catalog
CVE-2024-8932
MediumSummary
In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, uncontrolled long string inputs to the ldap_escape() function on 32-bit systems can cause an integer overflow, resulting in an out-of-bounds write.
Risk Assessment
An attacker could remotely crash the application or potentially execute arbitrary code, threatening data confidentiality and integrity.
Recommendation
Immediately upgrade PHP to version 8.1.31, 8.2.26, 8.3.14 or later.
Original NVD description (English source)
In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, uncontrolled long string inputs to ldap_escape() function on 32-bit systems can cause an integer overflow, resulting in an out-of-bounds write.