Description
In PHP versions:8.1.* before 8.1.33, 8.2.* before 8.2.29, 8.3.* before 8.3.23, 8.4.* before 8.4.10 when parsing XML data in SOAP extensions, overly large (>2Gb) XML namespace prefix may lead to null pointer dereference. This may lead to crashes and affect the availability of the target server.
Remediation
References
Related Vulnerabilities
SharePoint Improper Authorization Vulnerability (CVE-2025-29794)
Zikula Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2014-2293)
Apache HTTP Server Other Vulnerability (CVE-1999-0926)
MySQL CVE-2016-8327 Vulnerability (CVE-2016-8327)
MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2019-16738)