CVE-2015-8616: Use After Free
Use-after-free vulnerability in the Collator::sortWithSortKeys function in ext/intl/collator/collatorsort.c in PHP 7.x before 7.0.1 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact by leveraging the relationships between a key buffer and a destroyed array.
Other sources
Fixed bug (Use after free in Collator::sortWithSortKeys). (CVE-2015-8616)
— PHP
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-8616?
CVE-2015-8616 is considered to have a high severity due to its potential to cause denial of service through application crashes.
How do I fix CVE-2015-8616?
To fix CVE-2015-8616, upgrade PHP to version 7.0.1 or later.
What does CVE-2015-8616 affect?
CVE-2015-8616 affects PHP versions prior to 7.0.1, specifically version 7.0.0.
Can CVE-2015-8616 be exploited remotely?
Yes, CVE-2015-8616 can be exploited by remote attackers to trigger application crashes.
What type of vulnerability is CVE-2015-8616?
CVE-2015-8616 is a use-after-free vulnerability that can lead to unintended behavior in the PHP application.