HexBrain

Internet Bug Bounty · Report #152782

locale_accept_from_http out-of-bounds access

Validstatus
$500bounty
1upvotes
13 Oct 2019disclosed

How it was found

Bug https://bugs.php.net/bug.php?id=72533

Reported to PHP 2016-07-03 04:03 UTC

Patch: 2016-07-19 08:55 UTC http://git.php.net/?p=php-src.git;a=commit;h=aa82e99ed8003c01f1ef4f0940e56b85c5b032d4

Fixed for PHP 5.5 (security only mode), PHP 5.6, PHP 7.0 http://php.net/ChangeLog-5.php http://php.net/ChangeLog-7.php

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original