CVE-2016-9935 in macOS

Summary

The php_wddx_push_element function in ext/wddx/wddx.c in PHP before 5.6.29 and 7.x before 7.0.14 allows remote attackers to cause a denial of service (out-of-bounds read and memory corruption) or possibly have unspecified other impact via an empty boolean element in a wddxPacket XML document.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservation

12/12/2016

Disclosure

01/04/2017

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
98610	Apple macOS apache_mod_php out-of-bounds	125	Not defined	Official fix	CVE-2016-9935
95040	PHP wddxPacket XML Document wddx.c php_wddx_push_element out-of-bounds	125	Not defined	Official fix	CVE-2016-9935

Sources

• MITRE
• NVD
• CVE Details