CVE-2024-11236

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, uncontrolled long string inputs to ldap_escape() function on 32-bit systems can cause an integer overflow, resulting in an out-of-bounds write.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787 CWE-190

Affected software

Vendor	Product	Versions
PHP Group	PHP	>= 8.1., < 8.1.31; >= 8.2., < 8.2.26; >= 8.3.*, < 8.3.14
php_group	php	>= 8.1.0, < 8.1.31; >= 8.2.0, < 8.2.26; >= 8.3.0, < 8.3.14
php_group	php	>= 8.1.0, < 8.1.31; >= 8.2.0, < 8.2.26; >= 8.3.0, < 8.3.14
php_group	php	>= 8.1.0, < 8.1.31; >= 8.2.0, < 8.2.26; >= 8.3.0, < 8.3.14

References

Timeline

Published: Nov 24, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2024

CVE-2024-112379.8A vulnerability, which was classified as critical, has been found in TP-Link VN020 F3v(T) TT_V6.2.1021. Affected by this issue is some unkno CVE-2024-112385.3A vulnerability, which was classified as critical, was found in Landray EKP up to 16.0. This affects the function delPreviewFile of the file CVE-2024-112394.3A vulnerability has been found in Landray EKP up to 16.0 and classified as critical. This vulnerability affects the function deleteFile of t CVE-2024-11244.3The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to unauthorized email sending due to a missing cap CVE-2024-112406.1A vulnerability was found in IBPhoenix ibWebAdmin up to 1.0.2 and classified as problematic. This issue affects some unknown processing of t CVE-2024-112417.5A vulnerability was found in code-projects Job Recruitment 1.0. It has been declared as critical. Affected by this vulnerability is an unkno CVE-2024-112427.2A vulnerability was found in ZZCMS 2023. It has been rated as critical. Affected by this issue is some unknown functionality of the file /ad CVE-2024-112436.1A vulnerability classified as problematic has been found in code-projects Online Shop Store 1.0. This affects an unknown part of the file /s CVE-2024-112449.8A vulnerability classified as critical was found in code-projects Farmacia 1.0. This vulnerability affects unknown code of the file /editar-CVE-2024-112457.5A vulnerability, which was classified as critical, has been found in code-projects Farmacia 1.0. This issue affects some unknown processing CVE-2024-112465.4A vulnerability, which was classified as problematic, was found in code-projects Farmacia 1.0. Affected is an unknown function of the file /CVE-2024-112475.4A vulnerability has been found in SourceCodester Online Eyewear Shop 1.0 and classified as problematic. Affected by this vulnerability is an