Question 1

What is CVE-2026-17544 — CVE-2026-17544?

Accepted Answer

Attacker-provided inputs to bccomp() could lead to an out-of-bounds write with stack and heap corruption in PHP versions from 8.4.* before 8.4.24 and from 8.5.* before 8.5.9.

Question 2

What is the authoritative source for CVE-2026-17544?

Accepted Answer

CVE-2026-17544 (CVE-2026-17544) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2026-17544CVE-2026-17544

Description

Scoring