Description
In PHP versions 7.3.x below 7.3.16 and 7.4.x below 7.4.4, while using mb_strtolower() function with UTF-32LE encoding, certain invalid strings could cause PHP to overwrite stack-allocated buffer. This could lead to memory corruption, crashes and potentially code execution.
Remediation
References
Related Vulnerabilities
WordPress Plugin All-in-One Event Calendar Multiple Vulnerabilities (1.10-standard)
Oracle JRE CVE-2022-21293 Vulnerability (CVE-2022-21293)
Artifactory Insufficiently Protected Credentials Vulnerability (CVE-2020-2164)
AngularJS Inefficient Regular Expression Complexity Vulnerability (CVE-2024-21490)