https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T07:04:13.510564+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2023-3824 CVE-2023-3824 — Buffer overflow and overread in phar_dir_read() 2026-10-15T07:04:13.563380+00:00

Affected: PHP Group PHP

In PHP version 8.0.* before 8.0.30,  8.1.* before 8.1.22, and 8.2.* before 8.2.8, when loading phar file, while reading PHAR directory entries, insufficient length checking may lead to a stack buffer overflow, leading potentially to memory corruption or RCE.

 https://cve.radiocsirt.org/vuln/usn-6305-1 USN-6305-1 — php8.1 vulnerabilities 2026-10-15T07:04:13.563438+00:00

Affected: Ubuntu:22.04:LTS: php8.1

It was discovered that PHP incorrectly handled certain XML files. An attacker could possibly use this issue to expose sensitive information. (CVE-2023-3823)

It was discovered that PHP incorrectly handled certain PHAR files. An attacker could possibly use this issue to cause a crash, expose sensitive information or execute arbitrary code. (CVE-2023-3824)