Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Hack the Elephant One Bite at a Time: JPEG-Related Memory-Safety Bugs in PHP

swarm.ptsecurity.com | research | #vulnerability-research | #memory-safety | #php | #heap-overflow | #jpeg | #getimagesize | #iptcembed

Summary

PT SWARM audited PHP's ext/standard C code and found memory-safety bugs: a heap memory disclosure in getimagesize() and a heap buffer overflow in iptcembed(), both reachable via crafted JPEGs.
Published
Collected

original ↗

Related coverage

  1. Hack the Elephant One Bite at a Time: NUL byte SQL Injection in pdo_firebird and NULL Pointer Dereference in PDO via pdo_pgsql (swarm.ptsecurity.com)
  2. Scaling Memory Safety: AI-Assisted Rewrites of C/C++ Dependencies to Rust (bughunters.google.com)
  3. Attack arithmetic: how an integer overflow in PostgreSQL libpq leads to denial of service (swarm.ptsecurity.com)
  4. Impossible XXE in PHP (swarm.ptsecurity.com)
  5. From opcode to code: how AI chatbots can help with decompilation (swarm.ptsecurity.com)
  6. Exploiting Arbitrary Object Instantiations in PHP without Custom Classes (swarm.ptsecurity.com)

back