CVE-2024-2757

score

<0.1

cvss

7.5

epss

1.9%

published

2024-04-29

kev added

—

first seen

2026-10-21

PHP 8.3.* before 8.3.5 contains an endless loop caused by mb_encode_mimeheader() when processing long strings of non-space characters followed by a space, letting attackers cause denial of service, exploit requires sending crafted input.