CVE-2013-2110: Heap-based buffer overflow in the php_quot_print_encode function in ext/standard/quot_print.c in PHP before...

Security readout for executives and security teams

This is an old PHP memory corruption flaw. A crafted value passed into PHP's quoted-printable encoder could crash the application, and the CVE leaves open the possibility of other unspecified impact. Business risk is mainly legacy exposure: systems still running PHP before 5.3.26 or PHP 5.4 before 5.4.16. Exposure is most likely in legacy PHP applications running PHP before 5.3.26 or PHP 5.4.x before 5.4.16, especially where remote or user-controlled content reaches quoted_printable_encode. Modern supported PHP deployments should not be exposed to the vulnerable versions named here. Treat this as a legacy-risk cleanup item unless old PHP remains in production. If affected versions are present, prioritize patching or retirement because externally reachable crashes can disrupt service and the CVE leaves impact beyond denial of service unresolved. Mitigation focus: Upgrade affected PHP 5.3 deployments to 5.3.26 or later.; Upgrade affected PHP 5.4 deployments to 5.4.16 or later.; Apply relevant vendor security updates from Ubuntu or Apple where applicable..

Prepared

Jun 14, 2026, 22:07 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.