CVE-2025-14181

Summary

The SOAP HTTP client guards its response buffer growth with a check that relies on signed integer overflow, which is undefined behaviour and is not guaranteed to trigger. When the check is optimised away, a malicious SOAP server can make the client allocate a buffer far smaller than the data it then writes into it, producing a heap buffer overflow.

Affected Software

VendorProductVersion RangeStatus
PHP GroupPHP8.2.* < 8.2.34affected
PHP GroupPHP8.3.* < 8.3.35affected
PHP GroupPHP8.4.* < 8.4.26affected
PHP GroupPHP8.5.* < 8.5.11affected

Weaknesses

  • CWE-190: CWE-190 Integer overflow or wraparound

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: poc
    • Automatable: no
    • Technical Impact: partial

Additional References

References