CVE-2023-3824criticalobserved exploitationCWE-119

CVE-2023-3824: critical vulnerability in PHP

Buffer overflow and overread in phar_dir_read()

Published · Updated

Follow this CVE+ Monitor PHP+ Monitor php8.2

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

75Vexday Risk Score

Prioritize patching. It exploitation observed by VulnCheck and has a public proof of concept.

ssvc Actcvss 9.4epss 22%
from disclosure to weapon220 days
Published on NVDAug 11
1st PoC+220d
VulnCheck+269d
In PHP version 8.0.* before 8.0.30,  8.1.* before 8.1.22, and 8.2.* before 8.2.8, when loading phar file, while reading PHAR directory entries, insufficient length checking may lead to a stack buffer overflow, leading potentially to memory corruption or RCE.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
Affected products
PHP Group · PHP
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — PHP

In the same product, most dangerous first.

CVE-2026-109619CRITICALRCE via stale global stateEPSS 100.0%KEVCVE-2026-109618CRITICALRCE via OOM corruptionEPSS 100.0%KEVCVE-2024-4577CRITICALArgument Injection in PHP-CGIEPSS 100.0%KEVCVE-2022-31626HIGHmysqlnd/pdo password buffer overflowEPSS 58.1%CVE-2022-31629MEDIUM$_COOKIE names string replacement (. -> _): cookie integrity vulnerabilitiesEPSS 49.6%CVE-2024-2756MEDIUM__Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fixEPSS 38.1%