PHP 8.5.7 `dom_xml_serialization_algorithm()` stack-overflow

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-06-21 03:50 UTC
Importiert: 2026-06-21 04:51 UTC
Quelle-ID: full_disc
uid_hash: 55f2b265fd152ccd5ebb68eb25c436af7dcc10e62f72b6bf382c0b41215c509b

Full Disclosure

Posted by Khashayar Fereidani on Jun 20

Author: Khashayar Fereidani

Disclosure Date: 2026-06-18

Advisory: https://fereidani.com/php-857-domxmlserializationalgorithm-stack-overflow

Contact: https://fereidani.com/contact

The dom_xml_serialization_algorithm() and

dom_xml_serialize_element_node() functions in

ext/dom/xml_serializer.c rely on unbounded recursion to serialize

XML nodes....

No data

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
Full Disclosure	full_disc	threat_intel		-	de	https://seclists.org/rss/fulldisclosure.rss