Astra Linux – vulnerability in php8.1, php7.3

In PHP versions: 8.1. prior to 8.1.34, 8.2. prior to 8.2.30, 8.3. prior to 8.3.29, 8.4. prior to 8.4.16, and 8.5. prior to 8.5.1, a heap buffer overflow occurs in arraymerge when the total number of elements in packed arrays exceeds 32-bit limits or HTMAXSIZE. This is caused by an integer overflo...

AlmaLinux 10 : php (ALSA-2026:1628)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:1628 advisory. php: heap-based buffer overflow in arraymerge CVE-2025-14178 php: PHP: Information disclosure via getimagesize function when reading multi-chunk images...

SUSE CVE-2025-14178

In PHP versions:8.1. before 8.1.34, 8.2. before 8.2.30, 8.3. before 8.3.29, 8.4. before 8.4.16, 8.5. before 8.5.1, a heap buffer overflow occurs in arraymerge when the total element count of packed arrays exceeds 32-bit limits or HTMAXSIZE, due to an integer overflow in the precomputation of...

UBUNTU-CVE-2025-14178

In PHP versions:8.1. before 8.1.34, 8.2. before 8.2.30, 8.3. before 8.3.29, 8.4. before 8.4.16, 8.5. before 8.5.1, a heap buffer overflow occurs in arraymerge when the total element count of packed arrays exceeds 32-bit limits or HTMAXSIZE, due to an integer overflow in the precomputation of...

Linux Distros Unpatched Vulnerability : CVE-2022-4900

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in PHP where setting the environment variable PHPCLISERVERWORKERS to a large value leads to a heap buffer overflow. CVE-2022-4900 Note...

DEBIAN-CVE-2022-4900

A vulnerability was found in PHP where setting the environment variable PHPCLISERVERWORKERS to a large value leads to a heap buffer overflow...

PT-2022-6595 · Php +5 · Php +5

Name of the Vulnerable Software and Affected Versions: PHP affected versions not specified Description: A heap buffer overflow issue was discovered in PHP. This occurs when the PHP CLI SERVER WORKERS environment variable is set to a large value. The vulnerability is related to the php cli server...