In PHP versions 8.3.* before 8.3.19 and 8.4.* before 8.4.5, a code sequence involving __set handler or ??= operator and exceptions can lead to a use-after-free vulnerability. If the third party can control the memory layout leading to this, for example by supplying specially crafted inputs to the script, it could lead to remote code execution.
CVSS Details
- CVSS 4.0 Base Score: 9.2 (CRITICAL)
- CVSS 4.0 Vector: (CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Amber)
- CVSS 3.1 Base Score: 8.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-apcu-panelalma-upgrade-phpalma-upgrade-php-bcmathalma-upgrade-php-clialma-upgrade-php-commonalma-upgrade-php-dbaalma-upgrade-php-dbgalma-upgrade-php-develalma-upgrade-php-embeddedalma-upgrade-php-enchantalma-upgrade-php-ffialma-upgrade-php-fpmalma-upgrade-php-gdalma-upgrade-php-gmpalma-upgrade-php-intlalma-upgrade-php-ldapalma-upgrade-php-mbstringalma-upgrade-php-mysqlndalma-upgrade-php-odbcalma-upgrade-php-opcachealma-upgrade-php-pdoalma-upgrade-php-pecl-apcualma-upgrade-php-pecl-apcu-develalma-upgrade-php-pecl-redis6alma-upgrade-php-pecl-rrdalma-upgrade-php-pecl-xdebug3alma-upgrade-php-pecl-zipalma-upgrade-php-pgsqlalma-upgrade-php-processalma-upgrade-php-snmpalma-upgrade-php-soapalma-upgrade-php-xml | Jul 4, 2025 | Apr 4, 2025 | |
| Alpine Linux | alpine-linux-upgrade-php83 | Aug 8, 2025 | Apr 4, 2025 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-php8-3amazon-linux-2023-upgrade-php8-3-bcmathamazon-linux-2023-upgrade-php8-3-bcmath-debuginfoamazon-linux-2023-upgrade-php8-3-cliamazon-linux-2023-upgrade-php8-3-cli-debuginfoamazon-linux-2023-upgrade-php8-3-commonamazon-linux-2023-upgrade-php8-3-common-debuginfoamazon-linux-2023-upgrade-php8-3-dbaamazon-linux-2023-upgrade-php8-3-dba-debuginfoamazon-linux-2023-upgrade-php8-3-dbgamazon-linux-2023-upgrade-php8-3-dbg-debuginfoamazon-linux-2023-upgrade-php8-3-debuginfoamazon-linux-2023-upgrade-php8-3-debugsourceamazon-linux-2023-upgrade-php8-3-develamazon-linux-2023-upgrade-php8-3-embeddedamazon-linux-2023-upgrade-php8-3-embedded-debuginfoamazon-linux-2023-upgrade-php8-3-enchantamazon-linux-2023-upgrade-php8-3-enchant-debuginfoamazon-linux-2023-upgrade-php8-3-ffiamazon-linux-2023-upgrade-php8-3-ffi-debuginfoamazon-linux-2023-upgrade-php8-3-fpmamazon-linux-2023-upgrade-php8-3-fpm-debuginfoamazon-linux-2023-upgrade-php8-3-gdamazon-linux-2023-upgrade-php8-3-gd-debuginfoamazon-linux-2023-upgrade-php8-3-gmpamazon-linux-2023-upgrade-php8-3-gmp-debuginfoamazon-linux-2023-upgrade-php8-3-intlamazon-linux-2023-upgrade-php8-3-intl-debuginfoamazon-linux-2023-upgrade-php8-3-ldapamazon-linux-2023-upgrade-php8-3-ldap-debuginfoamazon-linux-2023-upgrade-php8-3-mbstringamazon-linux-2023-upgrade-php8-3-mbstring-debuginfoamazon-linux-2023-upgrade-php8-3-modphpamazon-linux-2023-upgrade-php8-3-modphp-debuginfoamazon-linux-2023-upgrade-php8-3-mysqlndamazon-linux-2023-upgrade-php8-3-mysqlnd-debuginfoamazon-linux-2023-upgrade-php8-3-odbcamazon-linux-2023-upgrade-php8-3-odbc-debuginfoamazon-linux-2023-upgrade-php8-3-opcacheamazon-linux-2023-upgrade-php8-3-opcache-debuginfoamazon-linux-2023-upgrade-php8-3-pdoamazon-linux-2023-upgrade-php8-3-pdo-debuginfoamazon-linux-2023-upgrade-php8-3-pgsqlamazon-linux-2023-upgrade-php8-3-pgsql-debuginfoamazon-linux-2023-upgrade-php8-3-processamazon-linux-2023-upgrade-php8-3-process-debuginfoamazon-linux-2023-upgrade-php8-3-pspellamazon-linux-2023-upgrade-php8-3-pspell-debuginfoamazon-linux-2023-upgrade-php8-3-snmpamazon-linux-2023-upgrade-php8-3-snmp-debuginfoamazon-linux-2023-upgrade-php8-3-soapamazon-linux-2023-upgrade-php8-3-soap-debuginfoamazon-linux-2023-upgrade-php8-3-sodiumamazon-linux-2023-upgrade-php8-3-sodium-debuginfoamazon-linux-2023-upgrade-php8-3-tidyamazon-linux-2023-upgrade-php8-3-tidy-debuginfoamazon-linux-2023-upgrade-php8-3-xmlamazon-linux-2023-upgrade-php8-3-xml-debuginfoamazon-linux-2023-upgrade-php8-3-zipamazon-linux-2023-upgrade-php8-3-zip-debuginfo | Apr 8, 2025 | Apr 4, 2025 | |
| Freebsd | freebsd-upgrade-package-php81freebsd-upgrade-package-php82freebsd-upgrade-package-php83freebsd-upgrade-package-php84 | Dec 10, 2025 | Mar 13, 2025 | |
| Oracle_linux | — | oracle-linux-upgrade-apcu-paneloracle-linux-upgrade-phporacle-linux-upgrade-php-bcmathoracle-linux-upgrade-php-clioracle-linux-upgrade-php-commonoracle-linux-upgrade-php-dbaoracle-linux-upgrade-php-dbgoracle-linux-upgrade-php-develoracle-linux-upgrade-php-embeddedoracle-linux-upgrade-php-enchantoracle-linux-upgrade-php-ffioracle-linux-upgrade-php-fpmoracle-linux-upgrade-php-gdoracle-linux-upgrade-php-gmporacle-linux-upgrade-php-intloracle-linux-upgrade-php-ldaporacle-linux-upgrade-php-mbstringoracle-linux-upgrade-php-mysqlndoracle-linux-upgrade-php-odbcoracle-linux-upgrade-php-opcacheoracle-linux-upgrade-php-pdooracle-linux-upgrade-php-pecl-apcuoracle-linux-upgrade-php-pecl-apcu-develoracle-linux-upgrade-php-pecl-redis6oracle-linux-upgrade-php-pecl-rrdoracle-linux-upgrade-php-pecl-xdebug3oracle-linux-upgrade-php-pecl-ziporacle-linux-upgrade-php-pgsqloracle-linux-upgrade-php-processoracle-linux-upgrade-php-snmporacle-linux-upgrade-php-soaporacle-linux-upgrade-php-xml | May 26, 2025 | Apr 4, 2025 |
| Php | php-upgrade-8_3_19php-upgrade-8_4_5 | Feb 17, 2026 | Feb 17, 2026 | |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-apcu-panelredhat-upgrade-phpredhat-upgrade-php-bcmathredhat-upgrade-php-bcmath-debuginforedhat-upgrade-php-cliredhat-upgrade-php-cli-debuginforedhat-upgrade-php-commonredhat-upgrade-php-common-debuginforedhat-upgrade-php-dbaredhat-upgrade-php-dba-debuginforedhat-upgrade-php-dbgredhat-upgrade-php-dbg-debuginforedhat-upgrade-php-debuginforedhat-upgrade-php-debugsourceredhat-upgrade-php-develredhat-upgrade-php-embeddedredhat-upgrade-php-embedded-debuginforedhat-upgrade-php-enchantredhat-upgrade-php-enchant-debuginforedhat-upgrade-php-ffiredhat-upgrade-php-ffi-debuginforedhat-upgrade-php-fpmredhat-upgrade-php-fpm-debuginforedhat-upgrade-php-gdredhat-upgrade-php-gd-debuginforedhat-upgrade-php-gmpredhat-upgrade-php-gmp-debuginforedhat-upgrade-php-intlredhat-upgrade-php-intl-debuginforedhat-upgrade-php-ldapredhat-upgrade-php-ldap-debuginforedhat-upgrade-php-mbstringredhat-upgrade-php-mbstring-debuginforedhat-upgrade-php-mysqlndredhat-upgrade-php-mysqlnd-debuginforedhat-upgrade-php-odbcredhat-upgrade-php-odbc-debuginforedhat-upgrade-php-opcacheredhat-upgrade-php-opcache-debuginforedhat-upgrade-php-pdoredhat-upgrade-php-pdo-debuginforedhat-upgrade-php-pecl-apcuredhat-upgrade-php-pecl-apcu-debuginforedhat-upgrade-php-pecl-apcu-debugsourceredhat-upgrade-php-pecl-apcu-develredhat-upgrade-php-pecl-redis6redhat-upgrade-php-pecl-redis6-debuginforedhat-upgrade-php-pecl-redis6-debugsourceredhat-upgrade-php-pecl-rrdredhat-upgrade-php-pecl-rrd-debuginforedhat-upgrade-php-pecl-rrd-debugsourceredhat-upgrade-php-pecl-xdebug3redhat-upgrade-php-pecl-xdebug3-debuginforedhat-upgrade-php-pecl-xdebug3-debugsourceredhat-upgrade-php-pecl-zipredhat-upgrade-php-pecl-zip-debuginforedhat-upgrade-php-pecl-zip-debugsourceredhat-upgrade-php-pgsqlredhat-upgrade-php-pgsql-debuginforedhat-upgrade-php-processredhat-upgrade-php-process-debuginforedhat-upgrade-php-snmpredhat-upgrade-php-snmp-debuginforedhat-upgrade-php-soapredhat-upgrade-php-soap-debuginforedhat-upgrade-php-xmlredhat-upgrade-php-xml-debuginfo | May 15, 2025 | Apr 4, 2025 | |
| Rocky_linux | rocky-upgrade-phprocky-upgrade-php-bcmathrocky-upgrade-php-bcmath-debuginforocky-upgrade-php-clirocky-upgrade-php-cli-debuginforocky-upgrade-php-commonrocky-upgrade-php-common-debuginforocky-upgrade-php-dbarocky-upgrade-php-dba-debuginforocky-upgrade-php-dbgrocky-upgrade-php-dbg-debuginforocky-upgrade-php-debuginforocky-upgrade-php-debugsourcerocky-upgrade-php-develrocky-upgrade-php-embeddedrocky-upgrade-php-embedded-debuginforocky-upgrade-php-enchantrocky-upgrade-php-enchant-debuginforocky-upgrade-php-ffirocky-upgrade-php-ffi-debuginforocky-upgrade-php-fpmrocky-upgrade-php-fpm-debuginforocky-upgrade-php-gdrocky-upgrade-php-gd-debuginforocky-upgrade-php-gmprocky-upgrade-php-gmp-debuginforocky-upgrade-php-intlrocky-upgrade-php-intl-debuginforocky-upgrade-php-ldaprocky-upgrade-php-ldap-debuginforocky-upgrade-php-mbstringrocky-upgrade-php-mbstring-debuginforocky-upgrade-php-mysqlndrocky-upgrade-php-mysqlnd-debuginforocky-upgrade-php-odbcrocky-upgrade-php-odbc-debuginforocky-upgrade-php-opcacherocky-upgrade-php-opcache-debuginforocky-upgrade-php-pdorocky-upgrade-php-pdo-debuginforocky-upgrade-php-pecl-apcurocky-upgrade-php-pecl-apcu-debuginforocky-upgrade-php-pecl-apcu-debugsourcerocky-upgrade-php-pecl-apcu-develrocky-upgrade-php-pecl-redis6rocky-upgrade-php-pecl-redis6-debuginforocky-upgrade-php-pecl-redis6-debugsourcerocky-upgrade-php-pecl-rrdrocky-upgrade-php-pecl-rrd-debuginforocky-upgrade-php-pecl-rrd-debugsourcerocky-upgrade-php-pecl-xdebug3rocky-upgrade-php-pecl-xdebug3-debuginforocky-upgrade-php-pecl-xdebug3-debugsourcerocky-upgrade-php-pecl-ziprocky-upgrade-php-pecl-zip-debuginforocky-upgrade-php-pecl-zip-debugsourcerocky-upgrade-php-pgsqlrocky-upgrade-php-pgsql-debuginforocky-upgrade-php-processrocky-upgrade-php-process-debuginforocky-upgrade-php-snmprocky-upgrade-php-snmp-debuginforocky-upgrade-php-soaprocky-upgrade-php-soap-debuginforocky-upgrade-php-xmlrocky-upgrade-php-xml-debuginfo | Jul 31, 2025 | Jul 29, 2025 | |
| Suse | — | suse-upgrade-apache2-mod_php7suse-upgrade-apache2-mod_php8suse-upgrade-php7suse-upgrade-php7-bcmathsuse-upgrade-php7-bz2suse-upgrade-php7-calendarsuse-upgrade-php7-clisuse-upgrade-php7-ctypesuse-upgrade-php7-curlsuse-upgrade-php7-dbasuse-upgrade-php7-develsuse-upgrade-php7-domsuse-upgrade-php7-embedsuse-upgrade-php7-enchantsuse-upgrade-php7-exifsuse-upgrade-php7-fastcgisuse-upgrade-php7-fileinfosuse-upgrade-php7-fpmsuse-upgrade-php7-ftpsuse-upgrade-php7-gdsuse-upgrade-php7-gettextsuse-upgrade-php7-gmpsuse-upgrade-php7-iconvsuse-upgrade-php7-intlsuse-upgrade-php7-jsonsuse-upgrade-php7-ldapsuse-upgrade-php7-mbstringsuse-upgrade-php7-mysqlsuse-upgrade-php7-odbcsuse-upgrade-php7-opcachesuse-upgrade-php7-opensslsuse-upgrade-php7-pcntlsuse-upgrade-php7-pdosuse-upgrade-php7-pgsqlsuse-upgrade-php7-pharsuse-upgrade-php7-posixsuse-upgrade-php7-readlinesuse-upgrade-php7-shmopsuse-upgrade-php7-snmpsuse-upgrade-php7-soapsuse-upgrade-php7-socketssuse-upgrade-php7-sodiumsuse-upgrade-php7-sqlitesuse-upgrade-php7-sysvmsgsuse-upgrade-php7-sysvsemsuse-upgrade-php7-sysvshmsuse-upgrade-php7-testsuse-upgrade-php7-tidysuse-upgrade-php7-tokenizersuse-upgrade-php7-xmlreadersuse-upgrade-php7-xmlrpcsuse-upgrade-php7-xmlwritersuse-upgrade-php7-xslsuse-upgrade-php7-zipsuse-upgrade-php7-zlibsuse-upgrade-php8suse-upgrade-php8-bcmathsuse-upgrade-php8-bz2suse-upgrade-php8-calendarsuse-upgrade-php8-clisuse-upgrade-php8-ctypesuse-upgrade-php8-curlsuse-upgrade-php8-dbasuse-upgrade-php8-develsuse-upgrade-php8-domsuse-upgrade-php8-embedsuse-upgrade-php8-enchantsuse-upgrade-php8-exifsuse-upgrade-php8-fastcgisuse-upgrade-php8-ffisuse-upgrade-php8-fileinfosuse-upgrade-php8-fpmsuse-upgrade-php8-fpm-apachesuse-upgrade-php8-ftpsuse-upgrade-php8-gdsuse-upgrade-php8-gettextsuse-upgrade-php8-gmpsuse-upgrade-php8-iconvsuse-upgrade-php8-intlsuse-upgrade-php8-ldapsuse-upgrade-php8-mbstringsuse-upgrade-php8-mysqlsuse-upgrade-php8-odbcsuse-upgrade-php8-opcachesuse-upgrade-php8-opensslsuse-upgrade-php8-pcntlsuse-upgrade-php8-pdosuse-upgrade-php8-pgsqlsuse-upgrade-php8-pharsuse-upgrade-php8-posixsuse-upgrade-php8-readlinesuse-upgrade-php8-shmopsuse-upgrade-php8-snmpsuse-upgrade-php8-soapsuse-upgrade-php8-socketssuse-upgrade-php8-sodiumsuse-upgrade-php8-sqlitesuse-upgrade-php8-sysvmsgsuse-upgrade-php8-sysvsemsuse-upgrade-php8-sysvshmsuse-upgrade-php8-testsuse-upgrade-php8-tidysuse-upgrade-php8-tokenizersuse-upgrade-php8-xmlreadersuse-upgrade-php8-xmlwritersuse-upgrade-php8-xslsuse-upgrade-php8-zipsuse-upgrade-php8-zlib | Dec 5, 2025 | Jun 1, 2025 |
| Ubuntu | ubuntu-upgrade-libapache2-mod-php7-4ubuntu-upgrade-libapache2-mod-php8-0ubuntu-upgrade-libapache2-mod-php8-1ubuntu-upgrade-libapache2-mod-php8-3ubuntu-upgrade-php7-4ubuntu-upgrade-php7-4-cgiubuntu-upgrade-php7-4-cliubuntu-upgrade-php7-4-fpmubuntu-upgrade-php8-1ubuntu-upgrade-php8-1-cgiubuntu-upgrade-php8-1-cliubuntu-upgrade-php8-1-fpmubuntu-upgrade-php8-3ubuntu-upgrade-php8-3-cgiubuntu-upgrade-php8-3-cliubuntu-upgrade-php8-3-fpm | Apr 1, 2025 | Mar 14, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub