An integer wrap may occur in PHP 7.x before version 7.0.6 when reading zip files with the getFromIndex() and getFromName() methods of ZipArchive, resulting in a heap overflow. Full exploit included.
e8c95e113360c07e5f57ee1a402ad502f85525d7f354dd5b76ad74e45439655d