Php · Php · CVE-2016-7417
**Name of the Vulnerable Software and Affected Versions**
PHP versions prior to 5.6.26
PHP versions 7.x prior to 7.0.11
**Description**
The issue arises from insufficient input validation in the ext/spl/spl array.c component of the PHP interpreter. This allows remote attackers to cause a denial of service or possibly have other unspecified impacts by exploiting the vulnerability with specially crafted serialized data.
**Recommendations**
For PHP versions prior to 5.6.26, update to version 5.6.26 or later to resolve the issue.
For PHP versions 7.x prior to 7.0.11, update to version 7.0.11 or later to resolve the issue.