AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2020-7060

MEDIUM · CVSS 6.5 EPSS 8.89%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2020-02-10 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2020-7060
Severity
MEDIUM
CVSS
6.5
EPSS
8.89%

Original NVD Description

When using certain mbstring functions to convert multibyte encodings, in PHP versions 7.2.x below 7.2.27, 7.3.x below 7.3.14 and 7.4.x below 7.4.2 it is possible to supply data that will cause function mbfl_filt_conv_big5_wchar to read past the allocated buffer. This may lead to information disclosure or crash.