onyx --cves cve-2024-8929

CVE-2024-8929

MEDPOCPHP

score: <0.1
cvss: 5.8
epss: 2.2%
published: 2024-11-22
kev added: —
first seen: 2026-10-21

PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14 contain a data disclosure caused by heap memory exposure from a hostile MySQL server, letting attackers access sensitive data from other SQL requests, exploit requires interaction with malicious MySQL server.

Timeline

How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.

2024-11-22 Published
2026-10-21 Tracked by Onyx
2026-10-21 Public PoC

Exploit availability

Public PoC flagged by vulnx; no direct exploit link among the citations.

Weaknesses

CWE-125

References 3

https://github.com/php/php-src/security/advisories/GHSA-h35g-vwh6-m678
https://security.netapp.com/advisory/ntap-20250110-0008/
https://lists.debian.org/debian-lts-announce/2024/12/msg00007.html