[php-src] Issue #24870: [SECURITY] BUG-045: Buffer Overflow - Unsafe strcat() Usage
| From: | Codeleafly | Date: | Wed, 28 Oct 2026 01:50:29 +0000 |
| Subject: | [php-src] Issue #24870: [SECURITY] BUG-045: Buffer Overflow - Unsafe strcat() Usage | ||
| Groups: | php.bugs | ||
| Request: | Send a blank email to php-bugs+get-253323@lists.php.net to get a copy of this message | ||
Issue: https://github.com/php/php-src/issues/24870
Author: Codeleafly
## 🐛 Security Bug Report
**Bug ID:** BUG-045
**Category:** Buffer Overflow
**Subcategory:** Unsafe strcat() Usage
**Severity:** High
**CWE:** CWE-121
**CVSS Score:** 7.2
**File:**
ext/standard/php_crypt_r.c
**Line:** multiple
**Status:** UNFIXED
**Verified:** False
### Description
Unsafe strcat() call without destination size check. Buffer overflow when concatenated string
exceeds buffer size.
### Impact
Heap/stack buffer overflow, potential code execution.
### Remediation
Replace strcat() with strlcat() or strncat() with bounds checking.
### Exploitability
Remote if input is attacker-controlled
### Source
- Repository: https://github.com/php/php-src/
- Branch: master
- Analysis Date: 2026-10-27T16:38:37.937347Z
---
*Auto-generated from static security analysis of php-src.*
*Total bugs found: 161*