CVE-2016-4345

CVE-2016-4345 describes an integer overflow vulnerability in the php_filter_encode_url function within PHP versions prior to 7.0.4. This flaw allows remote attackers to trigger a heap-based buffer overflow by supplying a long string. Rated as Critical with a CVSS score of 9.8, this vulnerability is easily exploitable over the network with low attack complexity and no user interaction, potentially leading to denial of service, data compromise, or arbitrary code execution. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion, indicating awareness among security researchers.