UpHeron
All vulnerabilities

Servers and applications

CVE-2016-7479

In all versions of PHP 7, during the unserialization process, resizing the 'properties' hash table of a serialized object may lead to use-after-free. A remote attacker may exploit this bug to gain arbitrary code execution.

Severity
Critical 9.8
Published
12 Jan 2017
Last changed
17 Jun 2026
Added to UpHeron
14 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
PHPServers and applications · cpe:a:php:php
  • Version 7.1.0
  • Version 7.0.14
  • Version 7.0.12
  • Version 7.0.11
All 15 release lines
  • Version 7.0.0
  • Version 7.0.1
  • Version 7.0.2
  • Version 7.0.3
  • Version 7.0.4
  • Version 7.0.5
  • Version 7.0.6
  • Version 7.0.7
  • Version 7.0.8
  • Version 7.0.9
  • Version 7.0.10
  • Version 7.0.11
  • Version 7.0.12
  • Version 7.0.14
  • Version 7.1.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2016-7479
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2016-7479