VULNERABILITY INTELLIGENCE

CVE-2011-3182

CVSS score5 MEDIUM
EPSS probability19.15%
CISA KEVNot currently listed
Published2011-08-25
Last modified2026-06-16

Description

PHP before 5.3.7 does not properly check the return values of the malloc, calloc, and realloc library functions, which allows context-dependent attackers to cause a denial of service (NULL pointer dereference and application crash) or trigger a buffer overflow by leveraging the ability to provide an... .