The php_wddx_push_element function in ext/wddx/wddx.c in PHP before 5.6.29 and 7.x before 7.0.14 allows remote attackers to cause a denial of service (out-of-bounds read and memory corruption) or possibly have unspecified other impact via an empty boolean element in a wddxPacket XML document.
Metrics
Affected Vendors & Products
References
History
No history.

Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-06T03:07:31.375Z
Reserved: 2016-12-12T00:00:00
Link: CVE-2016-9935

No data.

Status : Modified
Published: 2017-01-04T20:59:00.573
Modified: 2024-11-21T03:02:02.340
Link: CVE-2016-9935
