CVE-2014-3622

score

<0.1

cvss

9.8

epss

3.1%

published

2020-02-19

kev added

—

first seen

2026-10-21

PHP 5.6.x before 5.6.1 contains a use-after-free caused by improper handling in the add_post_var function in the Posthandler component, letting remote attackers execute arbitrary code via a third-party filter extension that accesses a specific ksep value, exploit requires attacker to control the filter extension.