CVE-2019-11046: Buffer underflow in bc_shift_addsub
Fixed bug (Buffer underflow in bcshiftaddsub). (CVE-2019-11046)
Other sources
In PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0, PHP bcmath extension functions on some systems, including Windows, can be tricked into reading beyond the allocated space by supplying it with string containing characters that are identified as numeric by the OS but aren't ASCII numbers. This can read to disclosure of the content of some memory locations.
— Launchpad
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2019-11046?
CVE-2019-11046 refers to a fixed bug related to buffer underflow in the bc_shift_addsub function.
What is the severity of CVE-2019-11046?
The severity of CVE-2019-11046 is not mentioned in the provided information.
How does CVE-2019-11046 affect PHP?
CVE-2019-11046 affects PHP versions up to and excluding 7.2.26.
What is the remedy for CVE-2019-11046?
The remedy for CVE-2019-11046 is to upgrade PHP to version 7.2.26 or higher.
Where can I find more information about CVE-2019-11046?
More information about CVE-2019-11046 can be found at https://www.php.net/ChangeLog-7.php#7.2.26.