CVE-2024-11233CWE-122

Single byte overread with convert.quoted-printable-decode filter

Medium · published November 24, 2024

CVSS v3.1
4.8
EPSS
2%
Percentile
75.7
In the wild
Unconfirmed
What it is

In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, due to an error in convert.quoted-printable-decode filter certain data can lead to buffer overread by one byte, which can in certain circumstances lead to crashes or disclose content of other memory areas.

The record
Technical detail
CVSS v3.1
4.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.01607 · 75.7th percentile
Weakness
CWE-122 · Heap-based Buffer Overflow
Published
2024-11-24T01:08Z
EPSS history
Timeline
  • 24 NOV 01:08Z
    Single byte overread with convert.quoted-printable-decode filter
    cvelistv5