EIP-2026-104663
PRE-CVEPHP 5.4.3 - wddx_serialize_* / stream_bucket_* Variant Object Null Ptr Dereference
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-104663. PoCs published by condis.
AI-analyzed exploit summary This PHP script demonstrates a null pointer dereference vulnerability in PHP <= 5.4.3 when handling Variant objects with wddx_serialize_value or wddx_serialize_vars functions, leading to a crash (DoS). The exploit triggers the vulnerability by passing a Variant object to the affected functions.
Description
PHP 5.4.3 - wddx_serialize_* / stream_bucket_* Variant Object Null Ptr Dereference
Exploits (1)
This PHP script demonstrates a null pointer dereference vulnerability in PHP <= 5.4.3 when handling Variant objects with wddx_serialize_value or wddx_serialize_vars functions, leading to a crash (DoS). The exploit triggers the vulnerability by passing a Variant object to the affected functions.