PT-2026-40278 · Bitnami · Libphp
Published
2026-05-12
·
Updated
2026-05-12
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
In PHP versions 8.4.* before 8.4.21 and 8.5.* before 8.5.6, when an encoding name containing an embedded NUL byte is passed to mb convert encoding() or related mbstring functions, the code incorrectly assumes that when strncasecmp() returns 0 it means the strings have the same length. This can lead to out-of-bounds read of global memory, potentially causing a crash or information disclosure or crash. Affected functions include mb convert encoding(), mb detect encoding(), mb convert variables(), and mb detect order(), as well as the mbstring.detect order and mbstring.http output INI settings.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Libphp