Two critical memory-safety vulnerabilities in PHP's image-processing functions could allow attackers to leak sensitive heap memory.