Description
FrankenPHP before 1.13.4 contains a use-after-free vulnerability in worker mode that frees internal streams of SplTempFileObject or SplFileObject on php://temp instances surviving across requests. Remote clients can send requests reaching code that uses such persisted objects, causing reads of freed memory that leak garbage data or crash the process.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| php | frankenphp | < 1.13.4 | 1.13.4 |
References
- GitHub Security Advisory (GHSA-cm3q-jw2q-9rh5) vendor-advisory
- Patch Commit patch
- VulnCheck Advisory: FrankenPHP before 1.13.4 Use-After-Free of SplTempFileObject Streams in Worker Mode third-party-advisory