CVE-2016-4346

CVE-2016-4346 is an integer overflow vulnerability in the str_pad function within PHP versions prior to 7.0.4, affecting various openSUSE and PHP distributions. This critical vulnerability (CVSS 9.8) can be exploited remotely without authentication, potentially leading to a denial of service or other significant impacts due to a heap-based buffer overflow. While there is no known active exploitation or publicly available exploit code in Metasploit, Nuclei, or ExploitDB, the vulnerability has garnered substantial community discussion, indicating awareness and potential for future exploitation.