CVE-2015-4602

CVE-2015-4602 is a critical type confusion vulnerability affecting PHP versions before 5.4.40, 5.5.24, and 5.6.8, as well as Red Hat distributions. This flaw in the __PHP_Incomplete_Class function allows remote attackers to trigger an application crash, leading to a denial of service, and potentially execute arbitrary code. With a CVSS score of 9.8, it is easily exploitable over the network with low attack complexity and no user interaction, posing a high risk to confidentiality, integrity, and availability. Despite its severity, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion or media coverage.