REDHAT-BUG-2425625: Buffer Overflow
In PHP versions:8.1. before 8.1.34, 8.2. before 8.2.30, 8.3. before 8.3.29, 8.4. before 8.4.16, 8.5. before 8.5.1, a heap buffer overflow occurs in arraymerge() when the total element count of packed arrays exceeds 32-bit limits or HTMAXSIZE, due to an integer overflow in the precomputation of element counts using zendhashnumelements(). This may lead to memory corruption or crashes and affect the integrity and availability of the target server.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2425625?
The severity of REDHAT-BUG-2425625 is considered high due to the potential for a denial of service or compromise of the PHP application.
How do I fix REDHAT-BUG-2425625?
To fix REDHAT-BUG-2425625, upgrade to PHP version 8.1.34, 8.2.30, 8.3.29, 8.4.16, or 8.5.1 or later.
What are the affected PHP versions in REDHAT-BUG-2425625?
The affected PHP versions in REDHAT-BUG-2425625 include versions before 8.1.34, 8.2.30, 8.3.29, 8.4.16, and 8.5.1.
What is the impact of REDHAT-BUG-2425625 on applications?
The impact of REDHAT-BUG-2425625 on applications can lead to a heap buffer overflow, risking application stability and data corruption.
Is there a workaround for REDHAT-BUG-2425625?
Currently, there is no effective workaround for REDHAT-BUG-2425625 other than upgrading to a fixed version.