Search: CVE-2025-1861

CVE-2025-1861 is a vulnerability in PHP versions 8.1.* before 8.1.32, 8.2.* before 8.2.28, 8.3.* before 8.3.19, and 8.4.* before 8.4.5. It involves an incorrect calculation of buffer size when parsing HTTP redirect responses, where the location buffer is limited to 1024 bytes instead of the RFC9110 recommended 8000 bytes. This can cause incorrect URL truncation and potentially redirect users to unintended locations.