AIKIDO-2026-10175
hisamu/php-xbase is vulnerable to Allocation of Resources Without Limits or Throttling
42
Medium Risk
This Affects:
hisamu/php-xbaseTL;DR
Affected versions of this package do not properly validate memo field lengths when processing corrupted FPT files, allowing the parser to attempt excessive memory allocation that may lead to fatal errors or denial of service. An attacker could exploit this by supplying a specially crafted or malformed FPT file with an abnormally large memo length value, causing the application to allocate massive memory and crash or exhaust system resources during file processing.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range.
Background info
hisamu/php-xbase is vulnerable to Allocation of Resources Without Limits or Throttling in versions 1.3.0 - 2.3.0.
How to fix this
Upgrade the hisamu/php-xbase library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
SOC 2Compliant
ISO 27001Compliant