We have reproduced CVE-2022-31626, an RCE in PHP | PT SWARM

We have reproduced CVE-2022-31626, an RCE in PHP <= 7.4.29 which can be triggered via a rogue MySQL/MariaDB server!

It's a Heap Overflow, works with MySQLi/PDO, and doesn't require LOAD LOCAL INFILE.

The PoC https://github.com/CFandR-github/PHP-binary-bugs/tree/main/cve_2022_31626_remote_exploit