CVE-2024-11233
Single byte overread with convert.quoted-printable-decode filter
HIGH 8.2EPSS 1.6%
In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, due to an error in convert.quoted-printable-decode filter certain data can lead to buffer overread by one byte, which can in certain circumstances lead to crashes or disclose content of other memory areas.
- Affected
- PHP Group · PHP
- CVSS v3.1 NVD
- 8.2 HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H - CVSS v3.1 PHP
- 4.8 MEDIUM
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L - EPSS
- 1.61% chance of exploitation in the next 30 days, 76th percentile
- Published
- 2024-11-24
- Updated
- 2025-11-03