CVE-2026-17544

PHP bcmath bccomp() Out-of-Bounds Write (CVE-2026-17544)

CVE-2026-17544 is an out-of-bounds write vulnerability in the PHP bcmath extension, specifically in the bcstr2num() function in ext/bcmath/libbcmath/src/str2num.c. When the manual scale is smaller than the auto scale, the fraction is truncated and a…