CVE-2016-7479 in PHP
Summary
In all versions of PHP 7, during the unserialization process, resizing the 'properties' hash table of a serialized object may lead to use-after-free. A remote attacker may exploit this bug to gain arbitrary code execution.
Reservation
09/09/2016
Disclosure
01/11/2017
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 95195 | PHP Unserialization use after free | 416 | Not defined | Official fix | CVE-2016-7479 |