Threats tagged 'bit-libphp-2026-92842'

A vulnerability in libphp's convert.* stream filters allows out-of-bounds reads and information leaks when the line-break-chars option contains a NUL byte. The issue arises because the length of the line-break-chars string is tracked separately from its content, and the duplication function truncates at the NUL byte but retains the original length. This causes the filter to read beyond the allocated buffer, leaking adjacent heap memory in the output. The flaw affects multiple libphp versions and has been fixed in recent releases.