{"id":"CVE-2006-4486","url":"https://www.cyber-defence.io/tools/cve/CVE-2006-4486","generatedAt":"2026-10-27T18:44:09.059Z","title":"Integer overflow in memory allocation routines in PHP before 5.1.6, when running on a 64-bit system, allows context-dependent attackers to bypass the memory_limit restriction.","description":"Integer overflow in memory allocation routines in PHP before 5.1.6, when running on a 64-bit system, allows context-dependent attackers to bypass the memory_limit restriction.","published":"2006-08-31T21:04:00.000Z","lastModified":"2026-06-16T22:29:12.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"2.0","score":2.6,"severity":"LOW","vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N"},"cwe":["CWE-189"],"affected":["php/php"],"epss":{"score":0.0236,"percentile":0.83657,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (2.36%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2006-0688.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/21546","tags":["Vendor Advisory"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/22004","tags":["Vendor Advisory"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/22069","tags":["Vendor Advisory"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/22225","tags":["Vendor Advisory"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/22331","tags":["Vendor Advisory"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/22440","tags":["Vendor Advisory"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/22487","tags":["Vendor Advisory"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/22538","tags":["Vendor Advisory"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/25945","tags":["Vendor Advisory"],"source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1016984","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-221.htm","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-222.htm","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-223.htm","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2007/dsa-1331","source":"cve@mitre.org"},{"url":"http://www.hardened-php.net/hphp/changelog.html#hardening_patch_0.4.14","tags":["Patch"],"source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2006_52_php.html","source":"cve@mitre.org"},{"url":"http://www.php.net/ChangeLog-5.php#5.1.6","source":"cve@mitre.org"},{"url":"http://www.php.net/release_5_1_6.php","tags":["Patch"],"source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0669.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0682.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/447866/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/19582","source":"cve@mitre.org"},{"url":"http://www.turbolinux.com/security/2006/TLSA-2006-38.txt","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-362-1","source":"cve@mitre.org"},{"url":"https://issues.rpath.com/browse/RPL-683","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11086","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2006-0688.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/21546","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/22004","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/22069","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/22225","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/22331","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/22440","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/22487","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/22538","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/25945","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1016984","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-221.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-222.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-223.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2007/dsa-1331","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.hardened-php.net/hphp/changelog.html#hardening_patch_0.4.14","tags":["Patch"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2006_52_php.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.php.net/ChangeLog-5.php#5.1.6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.php.net/release_5_1_6.php","tags":["Patch"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0669.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0682.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/447866/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/19582","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.turbolinux.com/security/2006/TLSA-2006-38.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-362-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-683","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11086","source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2006-4486","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}