CVE-2016-3141: Use After Free
Last updated 24 July 2024
Other sources
Use-after-free vulnerability in wddx.c in the WDDX extension in PHP before 5.5.33 and 5.6.x before 5.6.19 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact by triggering a wddxdeserialize call on XML data containing a crafted var element.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2016-3141.
What is the severity of CVE-2016-3141?
The severity of CVE-2016-3141 is critical with a CVSS score of 9.8.
What is the impact of CVE-2016-3141?
CVE-2016-3141 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly have other unspecified impact.
How do I fix CVE-2016-3141?
To fix CVE-2016-3141, update your PHP installation to version 5.5.33 or 5.6.19 or newer.
Where can I find more information about CVE-2016-3141?
You can find more information about CVE-2016-3141 in the PHP Git repository and the PHP bug tracker.