They gave too many details just by saying that it affects PHP 5 and later and is an RCE CVSSv4 9.2
This lets an AI agent look at the changes made from PHP 4 to PHP 5 and it also lets the agent guess what type of vulnerability it must be.
This lets an AI agent look at the changes made from PHP 4 to PHP 5 and it also lets the agent guess what type of vulnerability it must be.
I mean an agent can walk those changes, but it's close to just walking all the whole source / research from scratch at that point.