[php-src] Issue #24829: [SECURITY] BUG-004: Buffer Overflow - Unsafe strcpy() Usage

Issue: https://github.com/php/php-src/issues/24829 Author: Codeleafly ## 🐛 Security Bug Report **Bug ID:** BUG-004 **Category:** Buffer Overflow **Subcategory:** Unsafe strcpy() Usage **Severity:** High **CWE:** CWE-121 **CVSS Score:** 7.5 **File:** sapi/fpm/fpm/fpm_conf.c **Line:** multiple **Status:** UNFIXED **Verified:** False ### Description Unsafe strcpy() call detected without bounds checking. Potential stack/heap buffer overflow when source exceeds destination buffer size. ### Impact Arbitrary code execution, crash, or memory corruption via buffer overflow. ### Remediation Replace strcpy() with strlcpy() or strncpy() with explicit null termination and bounds checking. ### Exploitability Remote if attacker controls input data ### Source - Repository: https://github.com/php/php-src/ - Branch: master - Analysis Date: 2026-10-27T16:38:37.937347Z --- *Auto-generated from static security analysis of php-src.* *Total bugs found: 161*