CVE-2015-8865

CVE-2015-8865 is a buffer overflow vulnerability in the file_check_mem function of the 'file' utility, affecting PHP versions before 5.5.34, 5.6.20, and 7.0.5, as well as Apple macOS X. An attacker could exploit this by providing a specially crafted magic file, potentially leading to a denial of service (application crash) or arbitrary code execution. Rated with a CVSS score of 7.3 (HIGH), this vulnerability requires local access and user interaction (UI:R) to trigger. There is currently no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.