Use-after-free vulnerability in the SPL unserialize implementation in ext/spl/spl_array.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 allows remote attackers to execute arbitrary code via crafted serialized data that triggers misuse of an array field.
Metrics
Affected Vendors & Products
References
History
No history.

Status: PUBLISHED
Assigner: microfocus
Published:
Updated: 2024-08-06T07:36:33.365Z
Reserved: 2015-09-08T00:00:00
Link: CVE-2015-6832

No data.

Status : Deferred
Published: 2016-01-19T05:59:03.607
Modified: 2025-04-12T10:46:40.837
Link: CVE-2015-6832
