EIP-2026-104660

The writeup details an off-by-one buffer overflow vulnerability in PHP's ibase_gen_id() function, where user-supplied input is copied into a fixed-size buffer without proper bounds checking. The patch involves adjusting the snprintf call to prevent overflow.