CVE-2016-7398

Published: 2019-09-06T19:15Z

Last Modified: 2024-11-21T02:57Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

A type confusion vulnerability in the merge_param() function of php_http_params.c in PHP's pecl-http extension 3.1.0beta2 (PHP 7) and earlier as well as 2.6.0beta2 (PHP 5) and earlier allows attackers to crash PHP and possibly execute arbitrary code via crafted HTTP requests. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt