CVE-2023-0568

score

<0.1

cvss

7.5

epss

1.2%

published

2023-02-16

kev added

—

first seen

2026-10-21

PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16, and 8.2.X before 8.2.3 contain a path resolution buffer overflow caused by allocating a buffer one byte too small in the core path resolution function, letting attackers potentially access or modify data when resolving paths near MAXPATHLEN, exploit requires path length close to system MAXPATHLEN.