Internet Bug Bounty · Report #114414
openssl_seal() uninitialized memory usage
Validstatus
1upvotes
12 Nov 2019disclosed
How it was found
openssl_seal() is prone to use uninitialized memory that can be turned into a code execution.
Details about bug: https://bugs.php.net/bug.php?id=71475 (already fixed) Details about exploitation: http://akat1.pl/?id=1 (released after bug was fixed)