CVE-2021-21708

score

<0.1

cvss

8.2

epss

3.0%

published

2022-02-27

kev added

—

first seen

2026-10-21

PHP versions 7.4.x below 7.4.28, 8.0.x below 8.0.16, and 8.1.x below 8.1.3 contain a use-after-free caused by filter functions with FILTER_VALIDATE_FLOAT and min/max limits, letting attackers trigger crashes or potentially execute arbitrary code, exploit requires using filter with specific min/max limits.