CVE-2024-8929

PoC —

CVSS 3.1

5.8 medium

EPSS

2%p82

Published

Nov 22, 2024 (Nov 22, 2024)

Modified

Jun 17, 2026

Description

In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, a hostile MySQL server can cause the client to disclose the content of its heap containing data from other SQL requests and possible other data belonging to different users of the same server.

Vendors: php
Products: php
Weakness: CWE-125, CWE-200
Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (2.2%)

In the news0 stories

No ingested article mentions this CVE yet.