CVE-2024-8932

score

<0.1

cvss

9.8

epss

1.3%

published

2024-11-22

kev added

—

first seen

2026-10-21

PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14 contain an out-of-bounds write caused by integer overflow in ldap_escape() on 32-bit systems, letting attackers cause memory corruption, exploit requires sending long string inputs.