CVE-2016-7479: Use After Free
Fixed bug (Unserialize use-after-free when resizing object's properties hash table). (CVE-2016-7479)
Other sources
In all versions of PHP 7, during the unserialization process, resizing the 'properties' hash table of a serialized object may lead to use-after-free. A remote attacker may exploit this bug to gain arbitrary code execution.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-7479?
CVE-2016-7479 is considered critical due to its potential for arbitrary code execution.
How do I fix CVE-2016-7479?
To fix CVE-2016-7479, upgrade PHP to version 7.0.15 or 7.1.1 or later.
What versions of PHP are affected by CVE-2016-7479?
All versions of PHP 7 prior to 7.0.15 and 7.1.1 are affected by CVE-2016-7479.
Can CVE-2016-7479 be exploited remotely?
Yes, CVE-2016-7479 can be exploited remotely by an attacker to execute arbitrary code.
What type of vulnerability is CVE-2016-7479?
CVE-2016-7479 is characterized as a use-after-free vulnerability that occurs during the unserialization process.