In PHP versions 8.1.* before 8.1.34, 8.2.* before 8.2.30, 8.3.* before 8.3.29, 8.4.* before 8.4.16, 8.5.* before 8.5.1 when using the PDO PostgreSQL driver with PDO::ATTR_EMULATE_PREPARES enabled, an invalid character sequence (such as \x99) in a prepared statement parameter may cause the quoting function PQescapeStringConn to return NULL, leading to a null pointer dereference in pdo_parse_params() function. This may lead to crashes (segmentation fault) and affect the availability of the target server.
CVSS Details
- CVSS 4.0 Base Score: 8.2 (HIGH)
- CVSS 4.0 Vector: (CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X)
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-ffiUpgrade php-mysqlndUpgrade php-odbcUpgrade libzip-develUpgrade php-embeddedUpgrade php-intlUpgrade php-enchantUpgrade phpUpgrade php-opcacheUpgrade apcu-panelUpgrade php-pecl-redis6Upgrade php-ldapUpgrade php-bcmathUpgrade libzipUpgrade libzip-toolsUpgrade php-snmpUpgrade php-dbgUpgrade php-pecl-apcuUpgrade php-cliUpgrade php-dbaUpgrade php-gdUpgrade php-commonUpgrade php-gmpUpgrade php-pdoUpgrade php-processUpgrade php-xmlUpgrade php-mbstringUpgrade php-pecl-apcu-develUpgrade php-pecl-zipUpgrade php-fpmUpgrade php-pecl-xdebug3Upgrade php-pgsqlUpgrade php-develUpgrade php-pecl-rrdUpgrade php-pearUpgrade php-soap | Feb 2, 2026 | Jan 27, 2026 |
| Alpine Linux | — | Upgrade php81Upgrade php85Upgrade php84Upgrade php82Upgrade php83 | Jan 5, 2026 | Dec 27, 2025 |
| Amazon Linux Ami 2 | — | Upgrade php-commonUpgrade php-debuginfoUpgrade php-cliUpgrade php-opcacheUpgrade php-dbaUpgrade php-intlUpgrade php-sodiumUpgrade php-dbgUpgrade phpUpgrade php-snmpUpgrade php-odbcUpgrade php-embeddedUpgrade php-ldapUpgrade php-processUpgrade php-mysqlndUpgrade php-fpmUpgrade php-xmlUpgrade php-gmpUpgrade php-pgsqlUpgrade php-bcmathUpgrade php-enchantUpgrade php-pspellUpgrade php-soapUpgrade php-develUpgrade php-mbstringUpgrade php-pdoUpgrade php-gd | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade php8.3-zip-debuginfoUpgrade php8.4-pgsqlUpgrade php8.4-intlUpgrade php8.4-dbgUpgrade php8.2-gmpUpgrade php8.4-pdo-debuginfoUpgrade php8.4-gmp-debuginfoUpgrade php8.4-process-debuginfoUpgrade php8.1-opcacheUpgrade php8.1-fpmUpgrade php8.1-enchantUpgrade php8.1-snmpUpgrade php8.3-sodiumUpgrade php8.3-opcacheUpgrade php8.1-pgsqlUpgrade php8.4-enchant-debuginfoUpgrade php8.2-pgsqlUpgrade php8.2-gd-debuginfoUpgrade php8.1-bcmathUpgrade php8.3-embedded-debuginfoUpgrade php8.4-develUpgrade php8.4-zip-debuginfoUpgrade php8.4-zipUpgrade php8.3-modphp-debuginfoUpgrade php8.1-odbcUpgrade php8.1-gdUpgrade php8.2-tidy-debuginfoUpgrade php8.3-dba-debuginfoUpgrade php8.2-debugsourceUpgrade php8.4-embedded-debuginfoUpgrade php8.4-mbstringUpgrade php8.2Upgrade php8.3-fpmUpgrade php8.3-enchant-debuginfoUpgrade php8.3-odbcUpgrade php8.4-modphp-debuginfoUpgrade php8.3-mysqlnd-debuginfoUpgrade php8.2-opcache-debuginfoUpgrade php8.2-tidyUpgrade php8.4-modphpUpgrade php8.1-common-debuginfoUpgrade php8.4-commonUpgrade php8.2-bcmath-debuginfoUpgrade php8.3-snmpUpgrade php8.4Upgrade php8.2-pspell-debuginfoUpgrade php8.2-sodium-debuginfoUpgrade php8.2-opcacheUpgrade php8.2-zipUpgrade php8.3-gmp-debuginfoUpgrade php8.2-enchantUpgrade php8.3-common-debuginfoUpgrade php8.4-dbaUpgrade php8.1-dbaUpgrade php8.1-dbg-debuginfoUpgrade php8.4-pdoUpgrade php8.1-intl-debuginfoUpgrade php8.3-debugsourceUpgrade php8.3-process-debuginfoUpgrade php8.3-pdoUpgrade php8.1-opcache-debuginfoUpgrade php8.4-snmpUpgrade php8.2-ldap-debuginfoUpgrade php8.4-gd-debuginfoUpgrade php8.2-fpm-debuginfoUpgrade php8.2-dbaUpgrade php8.1-ffi-debuginfoUpgrade php8.3-ffiUpgrade php8.2-zip-debuginfoUpgrade php8.1-embedded-debuginfoUpgrade php8.2-develUpgrade php8.4-xml-debuginfoUpgrade php8.3-tidy-debuginfoUpgrade php8.4-mysqlndUpgrade php8.4-odbcUpgrade php8.1-snmp-debuginfoUpgrade php8.2-pdo-debuginfoUpgrade php8.4-mbstring-debuginfoUpgrade php8.1-commonUpgrade php8.4-ldap-debuginfoUpgrade php8.1-ffiUpgrade php8.4-processUpgrade php8.2-cliUpgrade php8.1-ldap-debuginfoUpgrade php8.3-commonUpgrade php8.2-dbg-debuginfoUpgrade php8.2-mbstringUpgrade php8.2-snmpUpgrade php8.3-mysqlndUpgrade php8.3-soapUpgrade php8.3-ldapUpgrade php8.2-xmlUpgrade php8.1-tidyUpgrade php8.3-intlUpgrade php8.3-pdo-debuginfoUpgrade php8.4-opcache-debuginfoUpgrade php8.4-bcmathUpgrade php8.2-intlUpgrade php8.2-gmp-debuginfoUpgrade php8.2-mysqlnd-debuginfoUpgrade php8.2-pspellUpgrade php8.3-sodium-debuginfoUpgrade php8.4-dbg-debuginfoUpgrade php8.3-odbc-debuginfoUpgrade php8.1-odbc-debuginfoUpgrade php8.4-tidyUpgrade php8.1-soap-debuginfoUpgrade php8.3-develUpgrade php8.1-process-debuginfoUpgrade php8.2-commonUpgrade php8.4-opcacheUpgrade php8.4-sodium-debuginfoUpgrade php8.2-soap-debuginfoUpgrade php8.4-tidy-debuginfoUpgrade php8.2-embeddedUpgrade php8.4-dba-debuginfoUpgrade php8.1-ldapUpgrade php8.2-ffi-debuginfoUpgrade php8.3-snmp-debuginfoUpgrade php8.1-develUpgrade php8.4-ffiUpgrade php8.4-embeddedUpgrade php8.3-zipUpgrade php8.3-enchantUpgrade php8.3-debuginfoUpgrade php8.3-xml-debuginfoUpgrade php8.4-sodiumUpgrade php8.2-sodiumUpgrade php8.1-gd-debuginfoUpgrade php8.3Upgrade php8.2-debuginfoUpgrade php8.1Upgrade php8.2-process-debuginfoUpgrade php8.2-odbc-debuginfoUpgrade php8.2-intl-debuginfoUpgrade php8.2-dbgUpgrade php8.2-cli-debuginfoUpgrade php8.1-gmpUpgrade php8.4-snmp-debuginfoUpgrade php8.4-fpm-debuginfoUpgrade php8.4-enchantUpgrade php8.3-ldap-debuginfoUpgrade php8.3-gdUpgrade php8.3-pspell-debuginfoUpgrade php8.4-cliUpgrade php8.4-mysqlnd-debuginfoUpgrade php8.2-pdoUpgrade php8.4-ldapUpgrade php8.3-bcmath-debuginfoUpgrade php8.4-gdUpgrade php8.3-mbstringUpgrade php8.2-ldapUpgrade php8.1-pdoUpgrade php8.1-gmp-debuginfoUpgrade php8.1-embeddedUpgrade php8.1-debugsourceUpgrade php8.4-soap-debuginfoUpgrade php8.1-fpm-debuginfoUpgrade php8.1-debuginfoUpgrade php8.1-cli-debuginfoUpgrade php8.2-bcmathUpgrade php8.1-pdo-debuginfoUpgrade php8.1-mbstringUpgrade php8.4-odbc-debuginfoUpgrade php8.4-debugsourceUpgrade php8.4-debuginfoUpgrade php8.4-cli-debuginfoUpgrade php8.3-processUpgrade php8.3-pgsql-debuginfoUpgrade php8.3-intl-debuginfoUpgrade php8.3-embeddedUpgrade php8.3-dbgUpgrade php8.2-mysqlndUpgrade php8.2-gdUpgrade php8.3-fpm-debuginfoUpgrade php8.2-embedded-debuginfoUpgrade php8.2-soapUpgrade php8.1-mysqlnd-debuginfoUpgrade php8.2-dba-debuginfoUpgrade php8.3-bcmathUpgrade php8.2-xml-debuginfoUpgrade php8.3-pspellUpgrade php8.3-soap-debuginfoUpgrade php8.3-xmlUpgrade php8.2-pgsql-debuginfoUpgrade php8.1-mbstring-debuginfoUpgrade php8.4-common-debuginfoUpgrade php8.4-pgsql-debuginfoUpgrade php8.4-intl-debuginfoUpgrade php8.1-tidy-debuginfoUpgrade php8.1-pgsql-debuginfoUpgrade php8.1-soapUpgrade php8.1-processUpgrade php8.2-enchant-debuginfoUpgrade php8.4-xmlUpgrade php8.4-fpmUpgrade php8.3-dbg-debuginfoUpgrade php8.3-cli-debuginfoUpgrade php8.3-cliUpgrade php8.2-common-debuginfoUpgrade php8.1-xmlUpgrade php8.1-pspellUpgrade php8.1-mysqlndUpgrade php8.1-dba-debuginfoUpgrade php8.1-bcmath-debuginfoUpgrade php8.1-dbgUpgrade php8.3-ffi-debuginfoUpgrade php8.2-ffiUpgrade php8.3-dbaUpgrade php8.2-odbcUpgrade php8.2-mbstring-debuginfoUpgrade php8.1-zipUpgrade php8.1-intlUpgrade php8.1-cliUpgrade php8.4-soapUpgrade php8.4-ffi-debuginfoUpgrade php8.4-bcmath-debuginfoUpgrade php8.3-gd-debuginfoUpgrade php8.3-tidyUpgrade php8.1-pspell-debuginfoUpgrade php8.4-gmpUpgrade php8.2-snmp-debuginfoUpgrade php8.3-pgsqlUpgrade php8.3-opcache-debuginfoUpgrade php8.2-processUpgrade php8.1-xml-debuginfoUpgrade php8.3-modphpUpgrade php8.1-zip-debuginfoUpgrade php8.3-mbstring-debuginfoUpgrade php8.3-gmpUpgrade php8.2-fpmUpgrade php8.1-enchant-debuginfo | Jan 12, 2026 | Dec 27, 2025 |
| Debian | — | Upgrade php8.4Upgrade php8.2 | Mar 4, 2026 | Mar 4, 2026 |
| Oracle_linux | — | Upgrade php-pecl-xdebug3Upgrade php-mbstringUpgrade php-intlUpgrade php-ffiUpgrade php-commonUpgrade php-xmlUpgrade php-mysqlndUpgrade php-cliUpgrade libzip-toolsUpgrade php-pgsqlUpgrade libzip-develUpgrade apcu-panelUpgrade php-snmpUpgrade php-opcacheUpgrade php-dbgUpgrade php-pecl-redis6Upgrade php-odbcUpgrade php-pdoUpgrade php-processUpgrade php-develUpgrade php-ldapUpgrade php-dbaUpgrade php-pecl-apcuUpgrade php-fpmUpgrade php-embeddedUpgrade php-pecl-zipUpgrade phpUpgrade php-gmpUpgrade php-pecl-rrdUpgrade php-enchantUpgrade php-bcmathUpgrade libzipUpgrade php-gdUpgrade php-soapUpgrade php-pecl-apcu-develUpgrade php-pear | Jan 29, 2026 | Dec 27, 2025 |
| Redhat_linux | — | Upgrade apcu-panelUpgrade php-pecl-zip-debuginfoUpgrade php-bcmath-debuginfoUpgrade libzipUpgrade php-pecl-apcuUpgrade php-pgsql-debuginfoUpgrade php-dbaUpgrade php-cliUpgrade php-enchantUpgrade php-cli-debuginfoUpgrade php-fpm-debuginfoUpgrade libzip-develUpgrade php-process-debuginfoUpgrade php-pecl-zipUpgrade libzip-debuginfoUpgrade php-embeddedUpgrade php-gmp-debuginfoUpgrade php-dbgNo solution existsUpgrade php-ffi-debuginfoUpgrade php-pecl-redis6Upgrade php-embedded-debuginfoUpgrade php-enchant-debuginfoUpgrade php-intlUpgrade php-debugsourceUpgrade php-ldapUpgrade php-mysqlndUpgrade php-mbstring-debuginfoUpgrade php-odbcUpgrade phpUpgrade php-pecl-apcu-debugsourceUpgrade php-gd-debuginfoUpgrade php-pecl-xdebug3-debuginfoUpgrade php-opcacheUpgrade php-pecl-rrd-debugsourceUpgrade php-pecl-redis6-debuginfoUpgrade php-pecl-redis6-debugsourceUpgrade php-snmp-debuginfoUpgrade php-processUpgrade php-pecl-zip-debugsourceUpgrade php-soapUpgrade php-pecl-rrdUpgrade php-intl-debuginfoUpgrade php-pgsqlUpgrade php-pecl-apcu-develUpgrade php-dba-debuginfoUpgrade php-commonUpgrade php-pecl-xdebug3Upgrade php-odbc-debuginfoUpgrade php-pdoUpgrade php-pecl-xdebug3-debugsourceUpgrade php-mysqlnd-debuginfoUpgrade php-dbg-debuginfoUpgrade php-develUpgrade php-common-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-debuginfoUpgrade php-pdo-debuginfoUpgrade php-ldap-debuginfoUpgrade php-xml-debuginfoUpgrade php-fpmUpgrade php-pearUpgrade php-xmlUpgrade php-mbstringUpgrade php-pecl-apcu-debuginfoUpgrade php-gmpUpgrade php-opcache-debuginfoUpgrade php-snmpUpgrade libzip-toolsUpgrade php-gdUpgrade php-bcmathUpgrade php-ffiUpgrade libzip-debugsourceUpgrade php-soap-debuginfoUpgrade libzip-tools-debuginfo | Jan 27, 2026 | Dec 27, 2025 |
| Rocky_linux | — | Upgrade php-odbc-debuginfoUpgrade php-cli-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade libzipUpgrade php-dbgUpgrade php-soapUpgrade php-xml-debuginfoUpgrade php-enchant-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-enchantUpgrade php-pecl-rrd-debuginfoUpgrade php-pecl-xdebug3-debugsourceUpgrade php-pecl-apcuUpgrade php-pecl-xdebug3Upgrade libzip-tools-debuginfoUpgrade php-pdo-debuginfoUpgrade php-pecl-xdebug3-debuginfoUpgrade php-fpmUpgrade php-ldapUpgrade php-pgsqlUpgrade php-ffi-debuginfoUpgrade php-develUpgrade php-gdUpgrade php-pecl-redis6-debugsourceUpgrade php-gmpUpgrade php-bcmathUpgrade php-pdoUpgrade php-embedded-debuginfoUpgrade php-pecl-redis6Upgrade php-pecl-zipUpgrade php-pecl-apcu-develUpgrade php-pecl-zip-debuginfoUpgrade php-embeddedUpgrade php-gmp-debuginfoUpgrade php-debugsourceUpgrade php-gd-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-pecl-rrdUpgrade php-dbg-debuginfoUpgrade php-process-debuginfoUpgrade php-commonUpgrade php-intl-debuginfoUpgrade php-ffiUpgrade php-processUpgrade php-cliUpgrade php-pecl-apcu-debugsourceUpgrade php-mbstringUpgrade php-fpm-debuginfoUpgrade libzip-develUpgrade libzip-debuginfoUpgrade php-opcacheUpgrade php-intlUpgrade php-dba-debuginfoUpgrade php-dbaUpgrade libzip-toolsUpgrade phpUpgrade php-snmp-debuginfoUpgrade php-snmpUpgrade php-pecl-rrd-debugsourceUpgrade php-pecl-redis6-debuginfoUpgrade php-opcache-debuginfoUpgrade php-mysqlndUpgrade php-ldap-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-odbcUpgrade php-common-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-xmlUpgrade php-soap-debuginfoUpgrade libzip-debugsourceUpgrade php-debuginfo | Jan 29, 2026 | Jan 28, 2026 |
| Ubuntu | — | Upgrade php7.2 (Ubuntu Pro)Upgrade php8.4Upgrade php8.3Upgrade php7.4 (Ubuntu Pro)Upgrade php8.1 | Jan 13, 2026 | Dec 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub