CVE-2022-4900

score

<0.1

cvss

6.2

epss

0.4%

published

2023-11-02

kev added

—

first seen

2026-10-21

PHP contains a heap buffer overflow caused by setting the environment variable PHP_CLI_SERVER_WORKERS to a large value, letting attackers cause memory corruption, exploit requires setting the environment variable to a large value.