CVEvulnerability

CVE-2025-14177

6.3 MEDIUM Published 2025-12-27 Modified 2026-10-13 Official page ↗
Status
Analyzed
Published
2025-12-27
Last modified
2026-10-13
Assigner
[email protected]
CVSS 4.0 ([email protected])
6.3 MEDIUM — CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-125

Description

In PHP versions:8.1.* before 8.1.34, 8.2.* before 8.2.30, 8.3.* before 8.3.29, 8.4.* before 8.4.16, 8.5.* before 8.5.1, the getimagesize() function may leak uninitialized heap memory into the APPn segments (e.g., APP1) when reading images in multi-chunk mode (such as via php://filter). This occurs due to a bug in php_read_stream_all_chunks() that overwrites the buffer without advancing the pointer, leaving tail bytes uninitialized. This may lead to information disclosure of sensitive heap data and affect the confidentiality of the target server.

Affected configurations

• php php (>= 8.1.0 < 8.1.34) • php php (>= 8.2.0 < 8.2.30) • php php (>= 8.3.0 < 8.3.29) • php php (>= 8.4.0 < 8.4.16) • php php 8.5.0

Related

Weakness · CWE (1)

  • CWE-125 Out-of-bounds Read weakness

References