Field Assessment
AI analysis pending.
CVE
CVE-2015-6831
Severity
HIGH
CVSS
7.3
EPSS
7.06%
Original Filing — NVD Description
Multiple use-after-free vulnerabilities in SPL in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 allow remote attackers to execute arbitrary code via vectors involving (1) ArrayObject, (2) SplObjectStorage, and (3) SplDoublyLinkedList, which are mishandled during unserialization.