CVE-2016-7478

HIGH · CVSS 7.5 EPSS 42.40%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2017-01-11 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2016-7478

Severity

HIGH

CVSS

7.5

EPSS

42.40%

Original Filing — NVD Description

Zend/zend_exceptions.c in PHP, possibly 5.x before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service (infinite loop) via a crafted Exception object in serialized data, a related issue to CVE-2015-8876.