CVE-2016-4344

CVE-2016-4344 is a critical integer overflow vulnerability in the xml_utf8_encode function within PHP versions prior to 7.0.4. This flaw allows remote attackers to trigger a heap-based buffer overflow by supplying a long argument to the utf8_encode function. With a CVSS score of 9.8, this vulnerability is easily exploitable over the network with low attack complexity, potentially leading to a denial of service, information disclosure, or arbitrary code execution. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion, indicating awareness and potential for future exploitation.