PHP » PHP : Security Vulnerabilities, CVEs, Published In 2015 (Information Leak) CVSS score >= 4

pcregrep in PCRE before 8.38 mishandles the -q option for binary files, which might allow remote attackers to obtain sensitive information via a crafted file, as demonstrated by a CGI script that sends stdout data to a client.