Description
The array_user_key_compare function in PHP 4.4.6 and earlier, and 5.x up to 5.2.1, makes erroneous calls to zval_dtor, which triggers memory corruption and allows local users to bypass safe_mode and execute arbitrary code via a certain unset operation after array_user_key_compare has been called.
Remediation
References
Related Vulnerabilities
Apache Traffic Server Deserialization of Untrusted Data Vulnerability (CVE-2026-58163)
WordPress Plugin Gravity Forms Cross-Site Scripting (2.0.6.5)
WordPress Plugin WP DSGVO Tools (GDPR) Cross-Site Scripting (3.1.23)
MySQL CVE-2022-21417 Vulnerability (CVE-2022-21417)
Liferay DXP Incorrect Authorization Vulnerability (CVE-2025-62275)