CVE-2010-1866

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 6.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2010-05-07 · updated 2026-06-16
Weakness: CWE-190

Description

The dechunk filter in PHP 5.3 through 5.3.2, when decoding an HTTP chunked encoding stream, allows context-dependent attackers to cause a denial of service (crash) and possibly trigger memory corruption via a negative chunk size, which bypasses a signed comparison, related to an integer overflow in the chunk size decoder.

Affected products

Opensuse: 11.1, 11.2, 11.3
PHP: from 5.3.0 through 5.3.2
SUSE Linux Enterprise: 10.0-sp3, 11.0, 11.0-sp1

References

http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html
http://php-security.org/2010/05/02/mops-2010-003-php-dechunk-filter-signed-comparison-vulnerability/index.html
http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html
http://php-security.org/2010/05/02/mops-2010-003-php-dechunk-filter-signed-comparison-vulnerability/index.html

Get alerted when CVE-2010-1866 or the next vulnerability affects your stack