Description
The substr_compare function in string.c in PHP 5.1.2 allows context-dependent attackers to cause a denial of service (memory access violation) via an out-of-bounds offset argument.
Remediation
References
Related Vulnerabilities
PHP Reliance on Cookies without Validation and Integrity Checking Vulnerability (CVE-2020-7070)
WordPress Plugin Ecwid Ecommerce Shopping Cart PHP Object Injection (4.4.3)
WordPress Plugin Elementor Addon Elements Multiple Cross-Site Scripting Vulnerabilities (1.11.1)
Nexus Repository Manager Server-Side Request Forgery (SSRF) Vulnerability (CVE-2021-43293)