[php-src] Issue #22669: Heap buffer overflow in bundled dba "flatfile" handler: negative record-length field in the database file is parsed with atoi() into size_t, wrapping the allocation size and overflowing the heap with attacker-controlled file bytes
[email protected] (cxxz16) Fri, 10 Jul 2026 11:57:07 +0000
| Newsgroups | php.bugs |
|---|---|
| Message-ID | <[email protected]> |
Issue: https://github.com/php/php-src/issues/22669 Closed by cxxz16.