CVE-2014-3669

CVE-2014-3669 is an integer overflow vulnerability in the object_custom function of PHP versions before 5.4.34, 5.5.18, and 5.6.2. This flaw allows remote attackers to trigger a denial of service or potentially execute arbitrary code by supplying a specially crafted argument to the unserialize function. With a CVSS score of 7.5, it is considered highly severe due to its network-based attack vector, low complexity, and potential for partial confidentiality, integrity, and availability impact. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered some community discussion and media coverage, indicating awareness within the security community.