CVE-2016-7416
php: Stack based buffer overflow in msgfmt_format_message
Severity
ModerateRed Hat Product Security
CVSS 3.0
Review impact separately from score.
Published · September 3, 2016
Updated · June 28, 2026
Description
ext/intl/msgformat/msgformat_format.c in PHP before 5.6.26 and 7.x before 7.0.11 does not properly restrict the locale length provided to the Locale class in the ICU library, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a MessageFormatter::formatMessage call with a long first argument.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.0 · 7.8CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0 · 5.1AV:N/AC:H/Au:N/C:P/I:P/A:P
CWE-121 · Stack-based Buffer Overflow