CVE-2024-11235CWE-416

Reference counting in php_request_shutdown causes Use-After-Free

Critical · published April 4, 2025

CVSS v4.0
9.2
EPSS
1%
Percentile
73.8
In the wild
Unconfirmed
What it is

In PHP versions 8.3.* before 8.3.19 and 8.4.* before 8.4.5, a code sequence involving __set handler or ??=  operator and exceptions can lead to a use-after-free vulnerability. If the third party can control the memory layout leading to this, for example by supplying specially crafted inputs to the script, it could lead to remote code execution.

The record
Technical detail
CVSS v4.0
9.2 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/U:Amber
EPSS
0.01482 · 73.8th percentile
Weakness
CWE-416 · Use After Free
Published
2025-04-04T17:51Z
EPSS history
Timeline
  • 04 APR 17:51Z
    Reference counting in php_request_shutdown causes Use-After-Free
    cvelistv5