OSV-2023-1243

Import Source

JSON Data

https://api.osv.dev/v1/vulns/OSV-2023-1243

Published

2023-12-01T13:02:45.270293Z

Modified

2023-12-01T13:02:45.270620Z

Summary

Heap-use-after-free in zend_reference_destroy

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64579

Crash type: Heap-use-after-free READ 4
Crash state:
zend_reference_destroy
rc_dtor_func
zend_leave_helper_SPEC

References

Affected packages

Type: GIT
Repo: https://github.com/php/php-src.git
Events: Introduced

423a1e586e186d1df7838216a88b63b67f37afea

Fixed

1e55c9760178f9d5e1de8b251537b3e8ccf44feb

{
    "severity": "HIGH"
}