Firetruck

CVE-2019-11043

KEV · Ransomware
Updated Oct 21, 2025 · PUBLISHED
View KEV entry →

Description

In some versions of PHP in certain configurations of FPM setup, it is possible to cause FPM module to write past allocated buffers allowing the possibility of remote code execution.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
PHPPHP / PHP>= 7.1.x, < 7.1.33affected
PHPPHP / PHP>= 7.2.x, < 7.2.24affected
PHPPHP / PHP>= 7.3.x, < 7.3.11affected