Php Group - vulnerabilities (CVEs)

108 CVEs in 3 products, 2 in the last 30 days, newest from 2026-10-21.

Products

Php - 103 CVEs
Pear - 1 CVEs
Php Imagick Extension - 1 CVEs

Newest CVEs of Php Group

CVE-2026-109619 - CVSS 9.2 (critical), 2026-10-21: PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated…
CVE-2026-109618 - CVSS 9.8 (critical), 2026-10-21: PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for…
CVE-2026-92842 - CVSS 5.9 (medium), 2026-09-25: The convert.base64-encode, convert.quoted-printable-encode and convert.quoted-printable-decode stream filters accept a line-break-chars option whose length is…
CVE-2026-91768 - CVSS 6.5 (medium), 2026-09-25: The IPv6 branch of the FastCGI client access check compares only the first 12 bytes of a 16-byte IPv6 address, so listen.allowed_clients matches on a /96…
CVE-2026-91769 - CVSS 4.3 (medium), 2026-09-25: PHP's OpenSSL stream peer verification checks the certificate's subjectAltName entries first and, whenever no entry matches, falls back to the Common Name.…
CVE-2026-91767 - CVSS 6.5 (medium), 2026-09-25: php_openssl_matches_wildcard_name() in ext/openssl/xp_ssl.c underflows the length argument passed to memchr() when a TLS server certificate presents a…
CVE-2025-1218 - CVSS 5.9 (medium), 2026-09-25: The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes for them. A malicious or…
CVE-2026-91766 - CVSS 5.9 (medium), 2026-09-25: When the http:// stream wrapper follows a redirect it forwards the user-supplied Authorization, Cookie and Proxy-Authorization headers unchanged, even when…
CVE-2026-91765 - CVSS 7.5 (high), 2026-09-25: cleanup_xml_node() in the SOAP XML parser recurses once per XML nesting level with no depth limit. An unauthenticated attacker can post a SOAP request…
CVE-2025-14181 - CVSS 6.5 (medium), 2026-09-25: The SOAP HTTP client guards its response buffer growth with a check that relies on signed integer overflow, which is undefined behaviour and is not guaranteed…
CVE-2026-17545 - CVSS 7.5 (high), 2026-09-25: On Windows, PHP's filesystem and stream APIs do not reject reserved device names such as CON, PRN, AUX, NUL, COM1 to COM9, LPT1 to LPT9, CONIN$ and CONOUT$…
CVE-2026-6103 - CVSS 4.3 (medium), 2026-09-25: phar_tar_number() parses the octal size field of a TAR header into a uint32_t with no overflow check. The field is 11 octal digits wide and holds values up to…
CVE-2026-93682 - CVSS 5.8 (medium), 2026-09-25: When the HTTP stream wrapper follows a redirect and the response carries a Location header with an empty value, the redirect code reads one byte past the end…
CVE-2026-7260 - CVSS 5.5 (medium), 2026-07-30: Circular symbolic links in phar archives could lead to unbounded recursion, exhausting the C stack and crashing the PHP process, in PHP versions from 8.2.*…
CVE-2026-17544 - CVSS 9.8 (critical), 2026-07-30: Attacker-provided inputs to bccomp() could lead to an out-of-bounds write with stack and heap corruption in PHP versions from 8.4.* before 8.4.24 and from…
CVE-2026-17543 - CVSS 9.8 (critical), 2026-07-30: Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8.2.* before 8.2.33, from 8.3.*…
CVE-2026-7263 - CVSS 7.5 (high), 2026-05-10: In PHP versions 8.4.* before 8.4.21 and 8.5.* before 8.5.6, DOMNode::C14N() method may process the XML data incorrectly, causing a circular linked list in the…
CVE-2026-6104 - CVSS 9.1 (critical), 2026-05-10: In PHP versions 8.4.* before 8.4.21 and 8.5.* before 8.5.6, when an encoding name containing an embedded NUL byte is passed to mb_convert_encoding() or…
CVE-2026-7258 - CVSS 7.5 (high), 2026-05-10: In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, some functions, including urldecode(), pass signed char…
CVE-2026-7262 - CVSS 7.5 (high), 2026-05-10: In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, when a SOAP server has a typemap configured, the…
CVE-2026-6735 - CVSS 7.3 (high), 2026-05-10: In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, 8.5.* before 8.5.6, due to improper sanitation of user data, it allows an…
CVE-2026-7261 - CVSS 9.8 (critical), 2026-05-10: In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, when SoapServer is configured with…
CVE-2026-6722 - CVSS 9.8 (critical), 2026-05-10: In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the SOAP extension's object deduplication mechanism…
CVE-2026-7259 - CVSS 6.5 (medium), 2026-05-10: In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, a mismatch between encoding lists in Oniguruma and mbfl…
CVE-2026-7568 - CVSS 7.5 (high), 2026-05-10: In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the metaphone() function in ext/standard/metaphone.c…
CVE-2025-14179 - CVSS 9.8 (critical), 2026-05-10: In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the PDO Firebird driver improperly handles NUL bytes…
CVE-2025-14180 - CVSS 8.2 (high), 2025-12-27: In PHP versions 8.1.* before 8.1.34, 8.2.* before 8.2.30, 8.3.* before 8.3.29, 8.4.* before 8.4.16, 8.5.* before 8.5.1 when using the PDO PostgreSQL driver…
CVE-2025-14178 - CVSS 8.2 (high), 2025-12-27: In PHP versions:8.1.* before 8.1.34, 8.2.* before 8.2.30, 8.3.* before 8.3.29, 8.4.* before 8.4.16, 8.5.* before 8.5.1, a heap buffer overflow occurs in…
CVE-2025-14177 - CVSS 7.5 (high), 2025-12-27: In PHP versions:8.1.* before 8.1.34, 8.2.* before 8.2.30, 8.3.* before 8.3.29, 8.4.* before 8.4.16, 8.5.* before 8.5.1, the getimagesize() function may leak…
CVE-2025-1735 - CVSS 7.5 (high), 2025-07-13: In PHP versions:8.1.* before 8.1.33, 8.2.* before 8.2.29, 8.3.* before 8.3.23, 8.4.* pgsql and pdo_pgsql escaping functions do not check if the underlying…