CVE-2014-4670: PHP

Medium severity, CVSS 4.6. EPSS: 0.7% chance of exploitation in the next 30 days.

Use-after-free vulnerability in ext/spl/spl_dllist.c in the SPL component in PHP through 5.5.14 allows context-dependent attackers to cause a denial of service or possibly have unspecified other impact via crafted iterator usage within applications in certain web-hosting environments.

Affected products

• PHP PHP: up to and including 5.5.14; version 5.5.0 only; version 5.5.1 only; version 5.5.2 only; version 5.5.3 only; version 5.5.4 only; …

Published 2014-07-10. Last modified 2026-06-17.