CVE-2026-6103 | PHP up to 8.2.33/8.3.34/8.4.25/8.5.10 Tar Header Parser phar_tar_number integer overflow

A vulnerability was found in PHP up to 8.2.33/8.3.34/8.4.25/8.5.10. It has been rated as problematic. Impacted is the function phar_tar_number of the component Tar Header Parser. The manipulation leads to integer overflow.

This vulnerability is traded as CVE-2026-6103. An attack has to be approached locally. There is no exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More