OSV-2023-69

Import Source

INTERNAL

JSON Data

https://api.osv.dev/v1/vulns/OSV-2023-69

Published

2023-02-17T13:02:09.653146Z

Modified

2023-02-17T13:02:09.653400Z

Summary

Heap-use-after-free in zend_ast_evaluate_inner

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56021

Crash type: Heap-use-after-free READ 4
Crash state:
zend_ast_evaluate_inner
zend_ast_evaluate_ex
zval_update_constant_with_ctx

References

Affected packages

Type: GIT
Repo: https://github.com/php/php-src.git
Events: Introduced

35a36b13e539c252d309f1799b5f653cf76921bd

Fixed

1978a7b393ebbf5018e07b42ba65325282eee336

{
    "severity": "HIGH"
}