EIP-2026-103629

This exploit leverages a UTF-8 character handling bug in PHP's htmlentities() function to trigger a Denial of Service (DoS). The code constructs a malformed UTF-8 string that causes the function to misbehave due to incorrect assumptions about character length.