note 126903 added to filter.filters.validate

FILTER_VALIDATE_FLOAT Security Risk CVE-2021-21708 High Risk from Warning from MITRE Corporation, Common Vulnerabilities and Exposures: In PHP versions 7.4.x below 7.4.28, 8.0.x below 8.0.16, and 8.1.x below 8.1.3, when using filter functions with FILTER_VALIDATE_FLOAT filter and min/max limits, if the filter fails, there is a possibility to trigger use of allocated memory after free, which can result it crashes, and potentially in overwrite of other memory chunks and RCE. This issue affects: code that uses FILTER_VALIDATE_FLOAT with min/max limits. (Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21708) ---- Server IP: 45.112.84.4 Probable Submitter: 80.90.5.135 (proxied: 2003:cf:d71c:4300:6035:6077:29bb:7ce) ---- Manual Page -- https://php.net/manual/en/filter.filters.validate.php Edit -- https://main.php.net/note/edit/126903 Del: integrated -- https://main.php.net/note/delete/126903/integrated Del: useless -- https://main.php.net/note/delete/126903/useless Del: bad code -- https://main.php.net/note/delete/126903/bad+code Del: spam -- https://main.php.net/note/delete/126903/spam Del: non-english -- https://main.php.net/note/delete/126903/non-english Del: in docs -- https://main.php.net/note/delete/126903/in+docs Del: other reasons-- https://main.php.net/note/delete/126903 Reject -- https://main.php.net/note/reject/126903 Search -- https://main.php.net/manage/user-notes.php