CVE-2025-14177 | PHP up to 8.1.33/8.2.29/8.3.28/8.4.15/8.5.0 getimagesize out-of-bounds

A vulnerability was found in PHP up to 8.1.33/8.2.29/8.3.28/8.4.15/8.5.0. It has been declared as problematic. This issue affects the function getimagesize. Such manipulation leads to out-of-bounds read.

This vulnerability is referenced as CVE-2025-14177. It is possible to launch the attack remotely. No exploit is available.

It is recommended to upgrade the affected component.