CVE-2020-7061

No fix known EPSS 4%CVSS 6.5

In PHP versions 7.3.x below 7.3.15 and 7.4.x below 7.4.3, while extracting PHAR files on Windows using phar extension, certain content inside PHAR file could lead to one-byte read past the allocated buffer. This could potentially lead to information disclosure or crash.

Published 2020-02-27 · CVE record · OSV

Products: PHP Group PHP