Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
PHP Double Free Vulnerability - CVE-2019-11049 - Vulnerability Database
PHP

PHP Double Free Vulnerability - CVE-2019-11049

Critical
Reference: CVE-2019-11049
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2019-11049
Title: PHP Double Free Vulnerability
Overview:

In PHP versions 7.3.x below 7.3.13 and 7.4.0 on Windows when supplying custom headers to mail() function due to mistake introduced in commit 78f4b4a2dcf92ddbccea1bb95f8390a18ac3342e if the header is supplied in lowercase this can result in double-freeing certain memory locations.