PHP Integer Overflow Vulnerability in ldap_escape Function on 32-Bit Systems

An integer overflow vulnerability has been identified in PHP versions 8.1.* prior to 8.1.31, 8.2.* prior to 8.2.26, and 8.3.* prior to 8.3.14. This vulnerability arises from uncontrolled long string inputs to the ldap_escape() function on 32-bit systems, leading to an out-of-bounds write.

Impact

Exploitation of this vulnerability causes an integer overflow, resulting in an out-of-bounds write, which can potentially be exploited to overwrite memory and cause a heap-use-after-free condition.

Remediation

Users can upgrade to PHP versions 8.1.31, 8.2.26, or 8.3.14 to address this vulnerability.