Files
CVEs-PoC/2010/CVE-2010-4657.md
2025-09-29 21:09:30 +02:00

677 B

CVE-2010-4657

Description

PHP5 before 5.4.4 allows passing invalid utf-8 strings via the xmlTextWriterWriteAttribute, which are then misparsed by libxml2. This results in memory leak into the resulting output.

POC

Reference

No PoCs from references.

Github