PHP 7.1.5 has an Out of bounds access in php_pcre_replace_impl via a crafted preg_replace call.

...

SUSE CVE-2017-9118

PHP 7.1.5 has an Out of bounds access in phppcrereplaceimpl via a crafted pregreplace call...