[Serious]

If an attacker sends a malicious PHAR file into your app, they could trigger a buffer overflow and potentially run their own code on your server.

 

Why does this happen?  -- This bug exists because PHP doesn’t properly handle PHAR metadata when it’s too big, leading to a stack buffer overflow.

PHP tries to load this metadata into a fixed-size buffer, but if the metadata is too large, it overflows

 

POC: https://github.com/jhonnybonny/CVE-2023-3824