Security Advisory

CVE-2019-9020

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-02-22 23:00:00

Last updated 2024-08-04 21:31:37

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. Invalid input to the function xmlrpc_decode() can lead to an invalid memory access (heap out of bounds read or read after free). This is related to xml_elem_parse_buf in ext/xmlrpc/libxmlrpc/xml_element.c.

← Browse all CVEs View on cve.org ↗