Description
Circular symbolic links in phar archives could lead to unbounded recursion, exhausting the C stack and crashing the PHP process, in PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.24, and from 8.5.* before 8.5.9.
Remediation
References
Related Vulnerabilities
PHP CVE-2011-1467 Vulnerability (CVE-2011-1467)
Envoy Proxy NULL Pointer Dereference Vulnerability (CVE-2025-62409)
WordPress Plugin Social Media Share Buttons & Social Sharing Icons Cross-Site Scripting (1.1.1.11)
Joomla! Core 1.5.x Security Bypass (1.5.0 - 1.5.13)
IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-1240)