Description
Use-after-free vulnerability in the Collator::sortWithSortKeys function in ext/intl/collator/collator_sort.c in PHP 7.x before 7.0.1 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact by leveraging the relationships between a key buffer and a destroyed array.
Remediation
References
Related Vulnerabilities
FrontAccounting Cross-site Request Forgery (CSRF) Vulnerability (CVE-2018-7176)
WordPress Plugin WP Sudoku Plus Unspecified Vulnerability (1.4)
WordPress Plugin Hot Files:File Sharing and Download Manager Cross-Site Scripting (1.0.0)
WordPress Plugin Pluginception Multiple Cross-Site Scripting Vulnerabilities (1.2)