CVE-2020-7067

Description

In PHP versions 7.2.x below 7.2.30, 7.3.x below 7.3.17 and 7.4.x below 7.4.5, if PHP is compiled with EBCDIC support (uncommon), urldecode() function can be made to access locations past the allocated memory, due to erroneously using signed numbers as array indexes.

Weakness classification

• CWE-125: Out-of-bounds Read
• CWE-196: Unsigned to Signed Conversion Error

Primary references

• security@php.net — Exploit, Vendor Advisory
• security@php.net — Third Party Advisory
• security@php.net — Third Party Advisory
• security@php.net — Third Party Advisory
• security@php.net — Not Applicable, Third Party Advisory
• security@php.net — Third Party Advisory
• security@php.net — Patch, Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Exploit, Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Not Applicable, Third Party Advisory