8.6
CVSSv3

CVE-2015-8616

Published: 19/01/2016 Updated: 22/01/2016
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
CVSS v3 Base Score: 8.6 | Impact Score: 4.7 | Exploitability Score: 3.9
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Use-after-free vulnerability in the Collator::sortWithSortKeys function in ext/intl/collator/collator_sort.c in PHP 7.x prior to 7.0.1 allows remote malicious users to cause a denial of service (application crash) or possibly have unspecified other impact by leveraging the relationships between a key buffer and a destroyed array.

Vulnerable Product Search on Vulmon Subscribe to Product

php php 7.0.0

Vendor Advisories

Use-after-free vulnerability in the Collator::sortWithSortKeys function in ext/intl/collator/collator_sortc in PHP 7x before 701 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact by leveraging the relationships between a key buffer and a destroyed array ...