REDHAT-BUG-2509256: High severity PHP PHP vulnerability
Attacker-provided inputs to bccomp() could lead to an out-of-bounds write with stack and heap corruption in PHP versions from 8.4. before 8.4.24 and from 8.5. before 8.5.9.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
PHPto a version that resolves this vulnerability.Fixed in 8.4.24 - Upgrade
Upgrade
PHPto a version that resolves this vulnerability.Fixed in 8.5.9
Event History
Frequently Asked Questions
Which PHP deployments are affected?
PHP versions in the 8.4 branch before 8.4.24 and in the 8.5 branch before 8.5.9 are affected. The provided information does not identify any affected versions outside those ranges.
What does an attacker need to exploit this issue?
An attacker needs to be able to provide input that reaches the bccomp() function. The issue is triggered by attacker-provided inputs and can result in an out-of-bounds write with stack and heap corruption.
How can I determine whether my environment needs remediation?
Check the installed PHP version and whether untrusted input can be passed to bccomp(). Systems running PHP 8.4 earlier than 8.4.24 or PHP 8.5 earlier than 8.5.9 should be treated as affected when such input is reachable.