CVE-2020-7067CWE-125CWE-196

OOB Read in urldecode()

High · published April 27, 2020

CVSS v3.1
7.5
EPSS
4%
Percentile
91.1
In the wild
Unconfirmed
What it is

In PHP versions 7.2.x below 7.2.30, 7.3.x below 7.3.17 and 7.4.x below 7.4.5, if PHP is compiled with EBCDIC support (uncommon), urldecode() function can be made to access locations past the allocated memory, due to erroneously using signed numbers as array indexes.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.04311 · 91.1th percentile
Weaknesses
CWE-125 · Out-of-bounds Read; CWE-196 · Unsigned to Signed Conversion Error
Published
2020-04-27T20:38Z
EPSS history
Timeline
  • 27 APR 20:38Z
    OOB Read in urldecode()
    cvelistv5