NULL Pointer Dereference in WDDX Packet Deserialization with PDORow in PHP before 5.6.28 (CVE-2016-9934).
Invalid read when wddx decodes empty boolean element in PHP before 5.6.29 (CVE-2016-9935).
{ "section": "core" }