CVEs-PoC/2016/CVE-2016-7479.md

### [CVE-2016-7479](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7479)
![](https://img.shields.io/static/v1?label=Product&message=PHP%207.x&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=PHP%207.x%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=Remote%20Code%20Execution&color=brightgreen)

### Description

In all versions of PHP 7, during the unserialization process, resizing the 'properties' hash table of a serialized object may lead to use-after-free. A remote attacker may exploit this bug to gain arbitrary code execution.

### POC

#### Reference
- https://bugs.php.net/bug.php?id=73092
- https://www.youtube.com/watch?v=LDcaPstAuPk

#### Github
- https://github.com/ARPSyndicate/cve-scores
- https://github.com/ARPSyndicate/cvemon