PHP 8.5.7 `FILTER_SANITIZE_ENCODED` uninitialized read

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-06-21 03:50 UTC
Importiert: 2026-06-21 04:51 UTC
Quelle-ID: full_disc
uid_hash: 98d6317c46ea54f922c44b67f9172c86958b5d6ecc4d91926a4f6624adda182c

Full Disclosure

Posted by Khashayar Fereidani on Jun 20

Author: Khashayar Fereidani

Disclosure Date: 2026-06-18

Advisory: https://fereidani.com/php-857-filtersanitizeencoded-uninitialized-read

Contact: https://fereidani.com/contact

In ext/filter/sanitizing_filters.c, the php_filter_encode_url

function leaves the 255th byte (0xFF) of a transient array

uninitialized. An array of 256 bytes is populated...

No data

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
Full Disclosure	full_disc	threat_intel		-	de	https://seclists.org/rss/fulldisclosure.rss