CVE-2020-7061 — heap-buffer-overflow in phar_extract_file
In PHP versions 7.3.x below 7.3.15 and 7.4.x below 7.4.3, while extracting PHAR files on Windows using phar extension, certain content inside PHAR file could lead to one-byte re…
Published: 2020-02-27 · CVSS: 6.5 · CVSS 3.1
In PHP versions 7.3.x below 7.3.15 and 7.4.x below 7.4.3, while extracting PHAR files on Windows using phar extension, certain content inside PHAR file could lead to one-byte read past the allocated buffer. This could potentially lead to information disclosure or crash.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7