AZL-104910
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-104910.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-104910
- Upstream
- Published
- 2026-09-25T21:17:19Z
- Modified
- 2026-11-11T05:27:43Z
- Summary
- CVE-2025-14181 affecting package php 8.3.36-1
- Details
-
The SOAP HTTP client guards its response buffer growth with a check that relies on signed integer overflow, which is undefined behaviour and is not guaranteed to trigger. When the check is optimised away, a malicious SOAP server can make the client allocate a buffer far smaller than the data it then writes into it, producing a heap buffer overflow.
- References