PHP 8.5.7 `mb_substr()` 'SJIS-mac' size_t underflow

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-06-21 03:50 UTC
Importiert: 2026-06-21 04:51 UTC
Quelle-ID: full_disc
uid_hash: 1640b8a08e420a83d443b8db0c4dbcfc343885d93757ce603e4342252f8191d4

Full Disclosure

Posted by Khashayar Fereidani on Jun 20

Author: Khashayar Fereidani

Disclosure Date: 2026-06-18

Advisory: https://fereidani.com/php-857-mbsubstr-sjis-mac-sizet-underflow

Contact: https://fereidani.com/contact

The mb_get_substr() function in ext/mbstring/mbstring.c

deliberately skips an early empty return guard for the SJIS-mac

encoding when from >= in_len. As a result, it falls...

No data

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
Full Disclosure	full_disc	threat_intel		-	de	https://seclists.org/rss/fulldisclosure.rss