Posted by Khashayar Fereidani on Jun 20# PHP 8.5.7 FILTER_SANITIZE_ENCODED uninitialized read Author: Khashayar Fereidani
Disclosure Date: 2026-06-18
Advisory: https://fereidani.com/php-857-filtersanitizeencoded-uninitialized-read
Contact: https://fereidani.com/contact ## Description In ext/filter/sanitizing_filters.c, the php_filter_encode_url
function leaves the 255th byte (0xFF) of a transient array
uninitialized. An array of 256 bytes is populated...
FILTER_SANITIZE_ENCODEDuninitialized read Author: Khashayar Fereidani Disclosure Date: 2026-06-18 Advisory: https://fereidani.com/php-857-filtersanitizeencoded-uninitialized-read Contact: https://fereidani.com/contact ## Description Inext/filter/sanitizing_filters.c, thephp_filter_encode_urlfunction leaves the255th byte (0xFF) of a transient array uninitialized. An array of 256 bytes is populated...