Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-104672. PoCs published by Taoguang Chen.
AI-analyzed exploit summary This exploit demonstrates a use-after-free vulnerability in PHP's unserialize() function with GMP objects, allowing arbitrary memory manipulation and potential remote code execution. The PoC constructs a malicious serialized string that triggers the vulnerability, enabling control over freed memory.
Description
PHP GMP - 'unserialize()' Use-After-Free
Exploits (1)
This exploit demonstrates a use-after-free vulnerability in PHP's unserialize() function with GMP objects, allowing arbitrary memory manipulation and potential remote code execution. The PoC constructs a malicious serialized string that triggers the vulnerability, enabling control over freed memory.