REDHAT-BUG-2357531: Use After Free

Published Apr 4, 2025

Updated

In PHP versions 8.3. before 8.3.19 and 8.4. before 8.4.5, a code sequence involving set handler or ??= operator and exceptions can lead to a use-after-free vulnerability. If the third party can control the memory layout leading to this, for example by supplying specially crafted inputs to the script, it could lead to remote code execution.

Affected Software

2 affected components

PHP PHP>8.3.19

PHP PHP>8.4.5

Event History

Apr 4, 2025

Data Sourced

via Red Hat·06:01 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-2357531?

The severity of REDHAT-BUG-2357531 has been classified as high due to potential exploitation leading to a use-after-free vulnerability.

How do I fix REDHAT-BUG-2357531?

To fix REDHAT-BUG-2357531, upgrade PHP to version 8.3.19 or 8.4.5 or later.

What versions of PHP are affected by REDHAT-BUG-2357531?

PHP versions 8.3.* before 8.3.19 and 8.4.* before 8.4.5 are affected by REDHAT-BUG-2357531.

What are the potential consequences of exploiting REDHAT-BUG-2357531?

Exploitation of REDHAT-BUG-2357531 could lead to remote code execution or application crashes.

Can malicious users exploit REDHAT-BUG-2357531 without access?

Yes, if a malicious user can control the memory layout via specially crafted input, they can exploit REDHAT-BUG-2357531.