Published date: 26 July 2026, 3:31 pm
Source: MyCERT (CyberSecurity Malaysia) — https://www.mycert.org.my/portal/details?menu=431fab9c-d24c-4a27-ba93-e92edafdefa5&id=024041de-c02c-4b2b-b0df-dbd2e48ad40b
Published date: 26 July 2026, 3:31 pm
Source: MyCERT (CyberSecurity Malaysia) — https://www.mycert.org.my/portal/details?menu=431fab9c-d24c-4a27-ba93-e92edafdefa5&id=024041de-c02c-4b2b-b0df-dbd2e48ad40b
Attacker-provided inputs to bccomp() could lead to an out-of-bounds write with stack and heap corruption in PHP versions from 8.4.* before 8.4.24 and from 8.5.* before 8.5.9.
Source: NVD (National Vulnerability Database) — https://nvd.nist.gov/vuln/detail/CVE-2026-17544