php.net
|
support
|
documentation
|
report a bug
|
advanced search
|
search howto
|
statistics
|
random bug
|
login
go to bug id or search bugs for
Showing 1-30 of 55
Show Next 30 Entries »
Bugs for WDDX related
ID#
Date
Last Modified
Type
Status
PHP Version
OS
Summary
Assigned
73173
(edit)
2016-09-26 08:13 UTC
2016-09-26 10:17 UTC
Bug
Closed
master-Git-2016-09-26 (Git)
All
huge memleak when wddx_unserialize
52468
(edit)
2010-07-28 11:16 UTC
2010-08-01 19:34 UTC
Bug
Closed
Irrelevant
CentOS release 5.5 (64 Bit)
wddx_deserialize corrupts integer field value when left empty
felipe
70661
(edit)
2015-10-07 17:08 UTC
2016-01-06 03:17 UTC
Sec Bug
Closed
Irrelevant
*
Use After Free Vulnerability in WDDX Packet Deserialization
stas
70741
(edit)
2015-10-19 14:36 UTC
2016-01-06 03:19 UTC
Sec Bug
Closed
Irrelevant
*
Session WDDX Packet Deserialization Type Confusion Vulnerability
stas
73793
(edit)
2016-12-20 11:59 UTC
Not modified
Bug
Closed
7.1.0
Windows
WDDX uses wrong decimal seperator
72564
(edit)
2016-07-08 06:55 UTC
2016-07-08 06:56 UTC
Bug
Closed
7.0.8
irrevelant
boolean always deserialized as "true"
remi
73831
(edit)
2016-12-29 14:55 UTC
2017-02-09 10:45 UTC
Sec Bug
Closed
7.0.14
ALL
NULL Pointer Dereference while unserialize php object
stas
34751
(edit)
2005-10-06 10:25 UTC
2005-10-06 11:00 UTC
Bug
Closed
5CVS-2005-10-06 (snap)
Linux, Suse 9.2
wddx_serialize_value broken in php5-200510051430
34068
(edit)
2005-08-10 13:58 UTC
2005-08-11 00:43 UTC
Bug
Closed
5CVS-2005-08-10
*
Numeric string as array key not cast to integer in wddx_deserialize()
31502
(edit)
2005-01-12 02:15 UTC
2005-04-11 12:39 UTC
Bug
Closed
5CVS-2005-02-28
WinXP SP2
Wrong deserialization from session when using WDDX serializer
27287
(edit)
2004-02-17 03:37 UTC
2010-12-20 11:43 UTC
Bug
Closed
5CVS-2004-02-16
*
wddx segfault when deserializing "object string"
jani
35410
(edit)
2005-11-26 17:11 UTC
2005-11-30 19:13 UTC
Bug
Closed
5CVS, 4CVS (2005-11-30) (cvs)
*
Strange behavior of function "wddx_deserialize"
iliaa
34306
(edit)
2005-08-30 14:10 UTC
2005-08-31 16:33 UTC
Bug
Closed
5CVS, 4CVS (2005-08-31)
*
wddx_serialize_value() crashes with long array keys
74145
(edit)
2017-02-22 04:11 UTC
2018-01-15 12:18 UTC
Sec Bug
Closed
5.6Git-2017-02-22 (Git)
Ubuntu 16.40 x64
wddx parsing empty boolean tag leads to SIGSEGV
stas
73631
(edit)
2016-12-01 03:52 UTC
2016-12-13 11:51 UTC
Sec Bug
Closed
5.6.28
Linux
Invalid read when wddx decodes empty boolean element
stas
73331
(edit)
2016-10-17 13:43 UTC
2016-12-13 11:51 UTC
Sec Bug
Closed
5.6.27
NULL Pointer Dereference in WDDX Packet Deserialization with PDORow
stas
72860
(edit)
2016-08-16 22:42 UTC
2016-09-16 13:39 UTC
Sec Bug
Closed
5.6.25
*
wddx_deserialize use-after-free
stas
73065
(edit)
2016-09-12 02:30 UTC
2016-09-16 13:41 UTC
Sec Bug
Closed
5.6.25
Ubuntu
Out-Of-Bounds Read in php_wddx_push_element of wddx.c
stas
72749
(edit)
2016-08-03 18:36 UTC
2016-09-05 15:28 UTC
Sec Bug
Closed
5.6.24
*
wddx_deserialize allows illegal memory access
stas
72750
(edit)
2016-08-03 19:51 UTC
2016-09-05 15:29 UTC
Sec Bug
Closed
5.6.24
*
wddx_deserialize null dereference
stas
72790
(edit)
2016-08-09 02:53 UTC
2016-09-05 15:29 UTC
Sec Bug
Closed
5.6.24
*
wddx_deserialize null dereference with invalid xml
stas
72799
(edit)
2016-08-10 04:29 UTC
2016-09-05 15:29 UTC
Sec Bug
Closed
5.6.24
*
wddx_deserialize null dereference in php_wddx_pop_element
stas
72142
(edit)
2016-05-03 12:14 UTC
2016-05-10 05:30 UTC
Bug
Closed
5.6.21
*
WDDX Packet Injection Vulnerability in wddx_serialize_value()
72340
(edit)
2016-06-06 06:26 UTC
2016-06-23 12:51 UTC
Sec Bug
Closed
5.5.36
Ubuntu 16.04 x86_64
Double Free Courruption in wddx_deserialize
stas
71587
(edit)
2016-02-14 10:35 UTC
2016-03-02 06:38 UTC
Sec Bug
Closed
5.5.32
Linux, Unix
Use-After-Free / Double-Free in WDDX Deserialize
stas
71335
(edit)
2016-01-11 12:45 UTC
2016-02-02 03:17 UTC
Sec Bug
Closed
5.5.31
*
Type Confusion in WDDX Packet Deserialization
stas
67873
(edit)
2014-08-20 12:58 UTC
2014-08-20 13:14 UTC
Bug
Closed
5.4.31
RHEL-7
Segfaults in php_wddx_serialize_var
remi
54557
(edit)
2011-04-18 11:00 UTC
2011-04-18 12:12 UTC
Doc
Closed
5.3SVN-2011-04-18 (snap)
GNU/Linux (Fedora 14)
wddx_unserialize doesn't exists
bjori
45901
(edit)
2008-08-24 04:54 UTC
2008-09-11 14:25 UTC
Bug
Closed
5.2.6, 5.3CVS
FreeBSD 7.0-STABLE
wddx_serialize_value crash with SimpleXMLElement object
46496
(edit)
2008-11-05 17:30 UTC
2008-11-19 23:52 UTC
Bug
Closed
5.2.6
Linux
[PATCH] wddx_serialize_value() treats input as ISO-8859-1
Showing 1-30 of 55
Show Next 30 Entries »
Copyright © 2001-2025 The PHP Group
All rights reserved.
Last updated: Sat Mar 15 06:01:28 2025 UTC