Description
An issue was discovered in PHP 7.3.x before 7.3.1. An invalid multibyte string supplied as an argument to the mb_split() function in ext/mbstring/php_mbregex.c can cause PHP to execute memcpy() with a negative argument, which could read and write past buffers allocated for the data.
Remediation
References
Related Vulnerabilities
WordPress Plugin Improved Product Options for WooCommerce Security Bypass (5.2.0)
OpenVPN AS Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2013-2692)
WordPress Plugin Easy Cookies Policy Cross-Site Scripting (1.6.2)
WordPress Plugin WP Reactions Lite Cross-Site Scripting (1.3.5)
WordPress Plugin A/B Test 'action' Parameter Directory Traversal (1.0.6)