Heap Buffer Overflow in PHP SOAP HTTP Client by PHP

CVE-2025-14181

What is CVE-2025-14181?

The PHP SOAP HTTP client contains a vulnerability that results from improper handling of response buffer growth. This issue allows a malicious SOAP server to exploit signed integer overflow checks, which may be optimized away, enabling the client to allocate insufficient buffer sizes. As a result, this can lead to a heap buffer overflow, allowing attackers to potentially execute arbitrary code or cause denial of service on affected systems.

References