Description
An issue was discovered in PHP 7.3.x before 7.3.1. An invalid multibyte string supplied as an argument to the mb_split() function in ext/mbstring/php_mbregex.c can cause PHP to execute memcpy() with a negative argument, which could read and write past buffers allocated for the data.
Remediation
References
Related Vulnerabilities
Artifactory Insufficient Verification of Data Authenticity Vulnerability (CVE-2018-19971)
WordPress Plugin Basic Google Maps Placemarks Cross-Site Scripting (1.10.2)
WordPress Plugin Bulk Delete Users by Email Cross-Site Request Forgery (1.0)
WordPress Plugin Cryptocurrency Widgets Pack SQL Injection (1.8.1)