A stack‑based buffer overflow exists in the Apache Thrift PHP bindings; the vulnerability arises when an attacker supplies a Thrift message containing a string length value that, when interpreted, causes an integer overflow. This overflow leads to an improperly sized stack buffer, allowing memory corruption and potentially arbitrary code execution within the PHP process.

All Apache Thrift PHP bindings prior to version 0.25.0 are affected. Applications that import the Thrift PHP library must verify the installation version and determine whether the service exposes a vulnerable endpoint.

The CVSS score of 8.7 indicates a high severity flaw. No EPSS score is available and the vulnerability is not listed in the CISA KEV catalog. Based on the description, it is inferred that an attacker could exercise the vulnerability by sending a carefully crafted Thrift packet over the network to a service that employs the vulnerable PHP bindings, manipulating the declared string length field to trigger the integer and subsequent buffer overflow. Such a network‑based exploitation path is plausible given the nature of the weakness.