CVE-2022-31630

This repository contains a functional Proof of Concept (PoC) exploit for CVE-2022-31630, an Out-of-Bounds (OOB) Read vulnerability in PHP's GD extension. The exploit demonstrates the vulnerability by creating a malformed font file that triggers an OOB read when processed by the imageloadfont() function.

This repository provides a detailed technical analysis of CVE-2022-31630, an Out-of-Bounds (OOB) Read vulnerability in PHP's GD extension, specifically in the imageloadfont() function. It explains the root cause, affected versions, and the mechanism of exploitation but does not include functional exploit code.