CVE-2007-1649

HIGH · CVSS 7.8 EPSS 7.21%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2007-03-24 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2007-1649

Severity

HIGH

CVSS

7.8

EPSS

7.21%

Original Filing — NVD Description

PHP 5.2.1 allows context-dependent attackers to read portions of heap memory by executing certain scripts with a serialized data input string beginning with S:, which does not properly track the number of input bytes being processed.