HexBrain

Internet Bug Bounty · Report #188102

3 heap corruptions in PHP

Validstatus
$1,500bounty
1upvotes
12 Nov 2019disclosed

How it was found

#73208 integer overflow in imap_8bit caused heap corruption https://bugs.php.net/bug.php?id=73208

#73082 string length overflow in mb_encode_* function https://bugs.php.net/bug.php?id=73082

#73174 heap overflow in php_pcre_replace_impl https://bugs.php.net/bug.php?id=73174

If you want to verify email secresearch@*, please email to that email a secret number, I can ping back.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original