← Database

CVE-2010-2225

HIGH CVSS: 7.5 Published: 2010-06-24 Modified: 2026-06-16

Description

Use-after-free vulnerability in the SplObjectStorage unserializer in PHP 5.2.x and 5.3.x through 5.3.2 allows remote attackers to execute arbitrary code or obtain sensitive information via serialized data, related to the PHP unserialize function.

Affected Platforms

Php Php

Weakness Type

CWE-399

References