CVE-2024-8932

CVE-2024-8932 is a critical integer overflow vulnerability affecting PHP versions 8.1.*, 8.2.*, and 8.3.* on 32-bit systems, specifically within the ldap_escape() function when processing uncontrolled long string inputs. This flaw can lead to an out-of-bounds write, potentially impacting NetApp ONTAP and PHP installations. With a CVSS score of 9.8 (CRITICAL), it presents a severe risk due to its network-based attack vector, low attack complexity, and high potential for confidentiality, integrity, and availability compromise. While there is no evidence of active exploitation, public exploit code, or KEV listing, the vulnerability has garnered significant community discussion, indicating awareness and potential future interest from threat actors.