Description
The mget function in libmagic/softmagic.c in the Fileinfo component in PHP 5.4.x before 5.4.16 allows remote attackers to cause a denial of service (invalid pointer dereference and application crash) via an MP3 file that triggers incorrect MIME type detection during access to an finfo object.
Remediation
References
Related Vulnerabilities
XWiki Server-Side Request Forgery (SSRF) Vulnerability (CVE-2023-48240)
Grafana Uncontrolled Resource Consumption Vulnerability (CVE-2026-21720)
Oracle Database Server CVE-2018-2575 Vulnerability (CVE-2018-2575)
Joomla! Core 1.5.x Multiple Cross-Site Scripting Vulnerabilities (1.5.0 - 1.5.20)
Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2008-3325)