HexBrain

Internet Bug Bounty · Report #178094

php_snmp_parse_oid integer overflow in memory allocation

Validstatus
lowseverity
$500bounty
2upvotes
12 Nov 2019disclosed

How it was found

https://bugs.php.net/bug.php?id=72708

An integer overflow in memory allocation allows to write past the allocated buffer, resulting in heap memory corruption.

Details and proof of concept are in the linked bug report; feel free to ask for more details if needed.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original