[php-src] Issue #24860: [SECURITY] BUG-035: Buffer Overflow - Unsafe sprintf() Usage

Issue: https://github.com/php/php-src/issues/24860 Author: Codeleafly ## 🐛 Security Bug Report **Bug ID:** BUG-035 **Category:** Buffer Overflow **Subcategory:** Unsafe sprintf() Usage **Severity:** High **CWE:** CWE-121 **CVSS Score:** 7.5 **File:** ext/gd/libgd/gdft.c **Line:** multiple **Status:** UNFIXED **Verified:** False ### Description Unsafe sprintf() call without size limitation. Format string overflow vulnerability when output exceeds buffer capacity. ### Impact Buffer overflow leading to arbitrary code execution or denial of service. ### Remediation Replace sprintf() with snprintf() or spprintf() with proper size limits. ### Exploitability Remote if format string or input is attacker-controlled ### Source - Repository: https://github.com/php/php-src/ - Branch: master - Analysis Date: 2026-10-27T16:38:37.937347Z --- *Auto-generated from static security analysis of php-src.* *Total bugs found: 161*