The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-odbcUpgrade php-develUpgrade libzipUpgrade php-processUpgrade php-dbaUpgrade php-intlUpgrade php-mbstringUpgrade php-gdUpgrade php-pecl-apcu-develUpgrade php-pecl-zipUpgrade php-pgsqlUpgrade php-pdoUpgrade php-enchantUpgrade php-soapUpgrade php-dbgUpgrade php-pecl-rrdUpgrade php-ldapUpgrade php-gmpUpgrade php-jsonUpgrade php-bcmathUpgrade php-pecl-xdebug3Upgrade php-pecl-redis6Upgrade php-pearUpgrade apcu-panelUpgrade php-cliUpgrade php-embeddedUpgrade php-xmlUpgrade php-opcacheUpgrade php-fpmUpgrade php-snmpUpgrade php-mysqlndUpgrade php-ffiUpgrade php-pecl-apcuUpgrade php-xmlrpcUpgrade php-pecl-xdebugUpgrade php-commonUpgrade libzip-toolsUpgrade libzip-develUpgrade php | Oct 25, 2026 | Oct 21, 2026 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Oct 26, 2026 | Oct 21, 2026 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Oct 23, 2026 | Oct 21, 2026 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Oct 21, 2026 | Oct 21, 2026 |
| Palo Alto Networks Pan Os | — | Upgrade Palo Alto Networks PAN-OS to the latest version | Oct 26, 2026 | Oct 21, 2026 |
| Php | — | Upgrade to the latest version of PHPUpgrade to PHP version 8.4.27Upgrade to PHP version 8.5.12Upgrade to PHP version 8.3.36Upgrade to PHP version 8.2.35 | Oct 21, 2026 | Oct 21, 2026 |
| Redhat_linux | — | Upgrade libzip-debugsourceUpgrade php-common-debuginfoUpgrade php8.4-dbgUpgrade php8.4-ffi-debuginfoUpgrade php8.4-dbaUpgrade php-mbstring-debuginfoUpgrade php-develUpgrade php8.4-pgsqlUpgrade php-debuginfoUpgrade php-ldap-debuginfoUpgrade php-soapUpgrade php-xml-debuginfoUpgrade php8.4-enchant-debuginfoUpgrade php-opcache-debuginfoUpgrade php8.4-xml-debuginfoUpgrade php-dba-debuginfoUpgrade php8.4-snmpUpgrade php-pecl-xdebugUpgrade php-pdo-debuginfoUpgrade php-pecl-redis6-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-processUpgrade php8.4-fpm-debuginfoUpgrade php8.4-xmlUpgrade php-odbc-debuginfoUpgrade php-commonUpgrade php-fpmUpgrade php-pecl-xdebug-debugsourceUpgrade php8.4-mysqlnd-debuginfoUpgrade php8.4-commonUpgrade php-pecl-xdebug3-debugsourceUpgrade php8.4-develUpgrade php-pearUpgrade php8.4-gmpUpgrade php-pecl-zip-debugsourceUpgrade php8.4-mbstringUpgrade php-dbgUpgrade php-dbg-debuginfoUpgrade libzip-debuginfoUpgrade php8.4-gdNo solution existsUpgrade php-pecl-rrdUpgrade php-gmpUpgrade php8.4-debuginfoUpgrade php8.4-embedded-debuginfoUpgrade php8.4-gmp-debuginfoUpgrade php-pgsqlUpgrade php-snmp-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php8.4-mbstring-debuginfoUpgrade php-mbstringUpgrade php8.4-bcmath-debuginfoUpgrade php8.4-cli-debuginfoUpgrade php-cli-debuginfoUpgrade php8.4-pgsql-debuginfoUpgrade php-odbcUpgrade php-xmlrpcUpgrade php-jsonUpgrade php8.4-bcmathUpgrade php-intl-debuginfoUpgrade php-pecl-xdebug3Upgrade php-pecl-apcu-develUpgrade php8.4Upgrade php8.4-pdo-debuginfoUpgrade php-json-debuginfoUpgrade php8.4-odbc-debuginfoUpgrade php-mysqlndUpgrade php-gmp-debuginfoUpgrade php-fpm-debuginfoUpgrade php8.4-debugsourceUpgrade php8.4-dba-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php8.4-enchantUpgrade php-pecl-apcu-debuginfoUpgrade php8.4-ldap-debuginfoUpgrade php8.4-gd-debuginfoUpgrade php-pecl-zipUpgrade php-enchantUpgrade php-debugsourceUpgrade php8.4-ldapUpgrade php8.4-fpmUpgrade php8.4-odbcUpgrade php-embedded-debuginfoUpgrade php8.4-opcacheUpgrade php-gdUpgrade php-xmlUpgrade php8.4-processUpgrade php-pecl-zip-debuginfoUpgrade php-pecl-redis6Upgrade php-pecl-xdebug-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-dbaUpgrade php-pecl-redis6-debugsourceUpgrade libzipUpgrade libzip-tools-debuginfoUpgrade php-pecl-apcuUpgrade php8.4-dbg-debuginfoUpgrade php8.4-pdoUpgrade php8.4-intl-debuginfoUpgrade php8.4-ffiUpgrade php-xmlrpc-debuginfoUpgrade apcu-panelUpgrade php8.4-intlUpgrade php8.4-soap-debuginfoUpgrade php8.4-embeddedUpgrade php8.4-mysqlndUpgrade php-embeddedUpgrade php-opcacheUpgrade php8.4-process-debuginfoUpgrade php8.4-soapUpgrade php-bcmathUpgrade php-enchant-debuginfoUpgrade libzip-toolsUpgrade php8.4-cliUpgrade php-intlUpgrade php-ldapUpgrade php-pdoUpgrade php8.4-opcache-debuginfoUpgrade php8.4-common-debuginfoUpgrade phpUpgrade php-snmpUpgrade php-bcmath-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-ffi-debuginfoUpgrade libzip-develUpgrade php8.4-snmp-debuginfoUpgrade php-soap-debuginfoUpgrade php-ffiUpgrade php-gd-debuginfoUpgrade php-cliUpgrade php-pecl-xdebug3-debuginfoUpgrade php-process-debuginfo | Oct 23, 2026 | Oct 21, 2026 |
| Rocky_linux | — | Upgrade php8.4-pgsql-debuginfoUpgrade php8.4-mysqlnd-debuginfoUpgrade php8.4-bcmathUpgrade php-develUpgrade php-pdoUpgrade php-pecl-apcu-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-enchantUpgrade php-enchant-debuginfoUpgrade php-pecl-xdebug3Upgrade php8.4-dbg-debuginfoUpgrade php-opcache-debuginfoUpgrade php-xmlrpcUpgrade php8.4-pdo-debuginfoUpgrade php8.4-snmpUpgrade php-xmlUpgrade php-pecl-xdebug3-debuginfoUpgrade php8.4-odbc-debuginfoUpgrade php8.4-debuginfoUpgrade php8.4-gdUpgrade php-pecl-redis6Upgrade php8.4-dbgUpgrade php-pecl-rrd-debugsourceUpgrade php-pecl-xdebugUpgrade php-fpmUpgrade php-processUpgrade php8.4-soap-debuginfoUpgrade php-debugsourceUpgrade php-embeddedUpgrade php8.4-bcmath-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-bcmathUpgrade libzipUpgrade php8.4-ffi-debuginfoUpgrade libzip-develUpgrade php-common-debuginfoUpgrade php8.4-snmp-debuginfoUpgrade php8.4-commonUpgrade php-dbg-debuginfoUpgrade php-cliUpgrade php8.4-dba-debuginfoUpgrade php-mbstringUpgrade php8.4-ffiUpgrade php-intl-debuginfoUpgrade php8.4-mbstring-debuginfoUpgrade php8.4-gd-debuginfoUpgrade php8.4-debugsourceUpgrade php8.4-enchantUpgrade php-embedded-debuginfoUpgrade php8.4-xmlUpgrade php-snmpUpgrade php-mysqlnd-debuginfoUpgrade php8.4-processUpgrade php8.4-gmp-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-mysqlndUpgrade php-pecl-rrdUpgrade php-gmpUpgrade php-pecl-apcuUpgrade php8.4-dbaUpgrade php-opcacheUpgrade php-xmlrpc-debuginfoUpgrade php8.4-ldapUpgrade php-pecl-zipUpgrade php-ldapUpgrade php-json-debuginfoUpgrade php-gd-debuginfoUpgrade php8.4-develUpgrade php8.4-opcacheUpgrade php-gdUpgrade php8.4-process-debuginfoUpgrade php-dbgUpgrade libzip-tools-debuginfoUpgrade php8.4-enchant-debuginfoUpgrade php-ldap-debuginfoUpgrade php-gmp-debuginfoUpgrade php8.4-intlUpgrade php-dba-debuginfoUpgrade php-fpm-debuginfoUpgrade php8.4-intl-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-pecl-apcu-develUpgrade php-mbstring-debuginfoUpgrade php8.4-cli-debuginfoUpgrade php-dbaUpgrade php8.4Upgrade php-commonUpgrade php-pecl-redis6-debugsourceUpgrade php-pdo-debuginfoUpgrade php8.4-mbstringUpgrade php-odbcUpgrade php-intlUpgrade phpUpgrade libzip-toolsUpgrade php8.4-pdoUpgrade php8.4-soapUpgrade php-jsonUpgrade php-bcmath-debuginfoUpgrade php8.4-xml-debuginfoUpgrade php8.4-fpmUpgrade php8.4-embeddedUpgrade php8.4-common-debuginfoUpgrade php-snmp-debuginfoUpgrade php8.4-mysqlndUpgrade php8.4-gmpUpgrade php-soapUpgrade php8.4-opcache-debuginfoUpgrade php8.4-cliUpgrade php-odbc-debuginfoUpgrade php8.4-odbcUpgrade php8.4-ldap-debuginfoUpgrade php8.4-embedded-debuginfoUpgrade php-soap-debuginfoUpgrade php-pgsqlUpgrade php-pecl-xdebug3-debugsourceUpgrade php-ffi-debuginfoUpgrade php-debuginfoUpgrade libzip-debuginfoUpgrade php-pecl-redis6-debuginfoUpgrade php-ffiUpgrade php-xml-debuginfoUpgrade php-process-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-cli-debuginfoUpgrade libzip-debugsourceUpgrade php8.4-pgsqlUpgrade php8.4-fpm-debuginfo | Oct 23, 2026 | Oct 22, 2026 |
| Suse | — | Upgrade php8-sysvsemUpgrade php8-gmpUpgrade php74-socketsUpgrade php74-gmpUpgrade php74-intlUpgrade php74-ctypeUpgrade php8-iconvUpgrade php7-domUpgrade php74-opensslUpgrade php7-gettextUpgrade php74-mbstringUpgrade php7-sqliteUpgrade php74-ftpUpgrade php8-zipUpgrade php7-jsonUpgrade php7-gmpUpgrade php74-pgsqlUpgrade php7-tidyUpgrade apache2-mod_php7Upgrade php7-sodiumUpgrade php74-xmlreaderUpgrade php8-zlibUpgrade php7Upgrade php7-xmlreaderUpgrade php8-mysqlUpgrade php8-cliUpgrade php8-develUpgrade php7-soapUpgrade php74-soapUpgrade php7-pgsqlUpgrade php7-posixUpgrade php7-ldapUpgrade php74-sysvmsgUpgrade php7-mysqlUpgrade php8-fpm-apacheUpgrade php8-fileinfoUpgrade php8-readlineUpgrade php74-readlineUpgrade php7-cliUpgrade php8-domUpgrade php74-iconvUpgrade php7-exifUpgrade php8-pgsqlUpgrade php74-calendarUpgrade php74-posixUpgrade php8-fpmUpgrade php7-fpmUpgrade php8-ftpUpgrade php7-pdoUpgrade php7-opcacheUpgrade php8-curlUpgrade php8-tidyUpgrade php7-dbaUpgrade php74-zlibUpgrade php8-dbaUpgrade php74-xslUpgrade php8-ctypeUpgrade php74-bcmathUpgrade php8-ldapUpgrade php8-sysvmsgUpgrade php8-pcntlUpgrade php7-gdUpgrade php7-odbcUpgrade php7-bz2Upgrade php7-sysvmsgUpgrade php8Upgrade php8-odbcUpgrade apache2-mod_php8Upgrade php7-socketsUpgrade php7-shmopUpgrade php7-xslUpgrade php7-readlineUpgrade php8-socketsUpgrade php74-xmlrpcUpgrade php7-develUpgrade php74-xmlwriterUpgrade php8-xmlreaderUpgrade php8-xslUpgrade php7-xmlrpcUpgrade php8-xmlwriterUpgrade php74-exifUpgrade php8-tokenizerUpgrade php74-jsonUpgrade php74-ldapUpgrade php74-gettextUpgrade php8-gettextUpgrade php74-shmopUpgrade php8-posixUpgrade php7-tokenizerUpgrade php74-fastcgiUpgrade php7-enchantUpgrade php8-sysvshmUpgrade php8-bcmathUpgrade php8-opensslUpgrade php7-sysvshmUpgrade php7-pcntlUpgrade php8-intlUpgrade php74-curlUpgrade php8-ffiUpgrade php74-fpmUpgrade php74-sodiumUpgrade php74Upgrade php74-opcacheUpgrade php74-fileinfoUpgrade php7-snmpUpgrade php74-sqliteUpgrade php74-pharUpgrade php74-pcntlUpgrade php7-intlUpgrade php8-soapUpgrade php8-snmpUpgrade php74-zipUpgrade php74-tokenizerUpgrade php74-sysvshmUpgrade php8-embedUpgrade php74-tidyUpgrade php74-domUpgrade php74-bz2Upgrade php7-opensslUpgrade php7-fastcgiUpgrade php8-opcacheUpgrade php8-gdUpgrade php8-fastcgiUpgrade php74-enchantUpgrade php7-sysvsemUpgrade php7-pharUpgrade php7-ctypeUpgrade php8-exifUpgrade php74-dbaUpgrade php8-pharUpgrade php74-snmpUpgrade php74-sysvsemUpgrade php74-gdUpgrade php7-zipUpgrade php7-mbstringUpgrade php7-iconvUpgrade php7-curlUpgrade php7-calendarUpgrade apache2-mod_php74Upgrade php8-pdoUpgrade php8-mbstringUpgrade php8-enchantUpgrade php8-calendarUpgrade php74-pdoUpgrade php7-fileinfoUpgrade php8-sqliteUpgrade php8-sodiumUpgrade php8-shmopUpgrade php74-odbcUpgrade php7-zlibUpgrade php7-xmlwriterUpgrade php7-ftpUpgrade php8-bz2Upgrade php7-bcmathUpgrade php8-testUpgrade php74-mysql | Oct 23, 2026 | Oct 22, 2026 |
| Ubuntu | — | Upgrade php8.3-fpmUpgrade libapache2-mod-php5 (Ubuntu Pro)Upgrade php8.5-cliUpgrade php8.1-cgiUpgrade php7.2-cli (Ubuntu Pro)Upgrade php5-cli (Ubuntu Pro)Upgrade php8.1-fpmUpgrade php5 (Ubuntu Pro)Upgrade php5-cgi (Ubuntu Pro)Upgrade php8.5-cgiUpgrade php7.4 (Ubuntu Pro)Upgrade php7.2-fpm (Ubuntu Pro)Upgrade php8.3-cgiUpgrade libapache2-mod-php7.0 (Ubuntu Pro)Upgrade php7.0-cli (Ubuntu Pro)Upgrade libapache2-mod-php7.4 (Ubuntu Pro)Upgrade php5-fpm (Ubuntu Pro)Upgrade libapache2-mod-php8.5Upgrade libapache2-mod-php8.1Upgrade php7.0 (Ubuntu Pro)Upgrade php7.4-cli (Ubuntu Pro)Upgrade php7.0-fpm (Ubuntu Pro)Upgrade php8.5-fpmUpgrade php7.4-fpm (Ubuntu Pro)Upgrade php7.2-cgi (Ubuntu Pro)Upgrade libapache2-mod-php8.3Upgrade php7.4-cgi (Ubuntu Pro)Upgrade php8.3-cliUpgrade php8.1-cliUpgrade php7.2 (Ubuntu Pro)Upgrade php7.0-cgi (Ubuntu Pro) | Oct 21, 2026 | Oct 21, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub