Description
The i_zval_ptr_dtor function in Zend/zend_variables.h in PHP 7.1.5 allows attackers to cause a denial of service (memory consumption and application crash) or possibly have unspecified other impact by triggering crafted operations on array data structures.
Remediation
References
Related Vulnerabilities
Mailman Improper Input Validation Vulnerability (CVE-2018-13796)
MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2008-5688)
PHP Improper Input Validation Vulnerability (CVE-2004-1019)
Oracle JRE CVE-2020-2654 Vulnerability (CVE-2020-2654)
WordPress Plugin Delete All Comments Arbitrary File Upload (2.0)