CVE-2019-9025 in NetApp and PHP Products
Published on February 22, 2019
An issue was discovered in PHP 7.3.x before 7.3.1. An invalid multibyte string supplied as an argument to the mb_split() function in ext/mbstring/php_mbregex.c can cause PHP to execute memcpy() with a negative argument, which could read and write past buffers allocated for the data.
Products Associated with CVE-2019-9025
stack.watch emails you whenever new vulnerabilities are published in NetApp Storage Automation Store or PHP. Just hit a watch button to start following.
Exploit Probability
EPSS
1.11%
Percentile
77.90%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.