CVE-2010-2097: The (1) iconv_mime_decode, (2) iconv_substr, and (3) iconv_mime_encode functions in PHP 5.2 through 5.2.13...

Security readout for executives and security teams

This CVE is an old PHP information disclosure issue. In specific PHP 5.2 and 5.3 versions, certain iconv functions could expose memory contents when interrupted in a context-dependent way. Treat it as relevant only where legacy PHP runtimes remain in use. Exposure is most likely in unsupported legacy PHP deployments, old appliance software, or vendor-packaged applications still running PHP 5.2.x or early 5.3.x. Modern supported PHP branches are not identified as affected in the supplied sources. Prioritize this during legacy-platform cleanup. It is not supported by the supplied evidence as an active emergency, but memory disclosure in obsolete PHP can increase risk where sensitive applications still depend on old runtimes. Mitigation focus: Inventory PHP runtimes and remove affected 5.2.x and early 5.3.x versions.; Apply fixed PHP packages from the operating system or vendor advisory channel.; Check HP and SUSE advisories if those distributions or products are in scope..

Prepared

Jun 28, 2026, 02:49 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.