In PHP versions 7.3.x below 7.3.15 and 7.4.x below 7.4.3, while extracting PHAR files on Windows using phar extension, certain content inside PHAR file could lead to one-byte read past the allocated buffer. This could potentially lead to information disclosure or crash. Reference: https://bugs.php.net/bug.php?id=79171
Closing this bug as NOTABUG as this affects only php running on top of Windows.
Statement: This flaw affects only PHP running on Windows operating system.