UpHeron
All vulnerabilities

Servers and applications

CVE-2021-21708

In PHP versions 7.4.x below 7.4.28, 8.0.x below 8.0.16, and 8.1.x below 8.1.3, when using filter functions with FILTER_VALIDATE_FLOAT filter and min/max limits, if the filter fails, there is a possibility to trigger use of allocated memory after free, which can result it crashes, and potentially in overwrite of other memory chunks and RCE. This issue affects: code that uses FILTER_VALIDATE_FLOAT…

Severity
Critical 9.8
Published
27 Feb 2022
Last changed
17 Jun 2026
Added to UpHeron
14 Oct 2026
Fixed in
7.4.28, 8.0.16, 8.1.3
Sources
NVD

Affected software

SoftwareAffected versions
PHPServers and applications · cpe:a:php:php
  • From 7.4.0 before 7.4.28
  • From 8.0.0 before 8.0.16
  • From 8.1.0 before 8.1.3

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2021-21708
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2021-21708