NetSight
medium4.8

CVE-2024-11233

In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, due to an error in convert.quoted-printable-decode filter certain data can lead …

Impact

In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, due to an error in convert.quoted-printable-decode filter certain data can lead to buffer overread by one byte, which can in certain circumstances lead to crashes or disclose content of other memory areas.

Affected products

VendorProductAffected versions
PhpPhp
from 8.1.0 before 8.1.31
from 8.2.0 before 8.2.26
from 8.3.0 before 8.3.14

Weakness classification

References