CVE-2011-1148

CVE-2011-1148 describes a use-after-free vulnerability in the substr_replace function of PHP versions 5.3.6 and earlier. This flaw allows attackers to trigger a denial of service through memory corruption, or potentially achieve other unspecified impacts, by manipulating arguments to the function. With a CVSS score of 7.5, it is considered highly severe due to its network-based attack vector and low attack complexity, potentially leading to partial confidentiality, integrity, and availability compromise. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this vulnerability.