Internet Bug Bounty · Report #781325
Out-of-bounds Read in php_strip_tags_ex
Validstatus
mediumseverity
1upvotes
9 Nov 2020disclosed
How it was found
The bug submitted at: https://bugs.php.net/bug.php?id=79156 The fix committed at: https://github.com/php/php-src/commit/2dc170e25d86a725fefd4c08f2bd8378820b28f5
Impact
Attackers can exploit this issue to obtain sensitive information or crash PHP remotely.