In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, a mismatch between encoding lists in Oniguruma and mbfl leads to a NULL pointer dereference, resulting in a segmentation fault and denial of service. The vulnerability is exploitable when user-controlled input can influence the encoding passed to mb_regex_encoding().
CVSS Details
- CVSS 4.0 Base Score: 2.1 (LOW)
- CVSS 4.0 Vector: (CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:X/V:X/RE:X/U:Amber)
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-cliUpgrade php-commonUpgrade php-snmpUpgrade php-embeddedUpgrade php-bcmathUpgrade phpUpgrade php-ffiUpgrade php-pgsqlUpgrade php-intlUpgrade php-enchantUpgrade php-mysqlndUpgrade php-odbcUpgrade php-ldapUpgrade php-opcacheUpgrade php-pdoUpgrade php-soapUpgrade php-dbgUpgrade php-dbaUpgrade php-develUpgrade php-gdUpgrade php-fpmUpgrade php-xmlUpgrade php-processUpgrade php-mbstringUpgrade php-gmp | Jul 2, 2026 | Jun 30, 2026 |
| Alpine Linux | — | Upgrade php83Upgrade php82Upgrade php84Upgrade php81Upgrade php85 | May 15, 2026 | May 10, 2026 |
| Amazon Linux Ami 2 | — | Upgrade php-intlUpgrade php-embeddedUpgrade php-soapUpgrade php-debuginfoUpgrade php-mbstringUpgrade php-processUpgrade php-gdUpgrade php-pspellUpgrade php-enchantUpgrade php-dbaUpgrade php-gmpUpgrade php-mysqlndUpgrade php-fpmUpgrade php-sodiumUpgrade php-develUpgrade php-pgsqlUpgrade php-bcmathUpgrade phpUpgrade php-cliUpgrade php-opcacheUpgrade php-xmlUpgrade php-ldapUpgrade php-pdoUpgrade php-odbcUpgrade php-dbgUpgrade php-snmpUpgrade php-common | Jun 8, 2026 | Jun 8, 2026 |
| Amazon_linux_2023 | — | Upgrade php8.2-intlUpgrade php8.2-mysqlndUpgrade php8.5-mbstringUpgrade php8.3-debuginfoUpgrade php8.4-mysqlnd-debuginfoUpgrade php8.3Upgrade php8.3-embeddedUpgrade php8.2-xml-debuginfoUpgrade php8.3-mbstringUpgrade php8.4-odbc-debuginfoUpgrade php8.2-fpmUpgrade php8.3-ffi-debuginfoUpgrade php8.3-processUpgrade php8.2-ffi-debuginfoUpgrade php8.3-opcache-debuginfoUpgrade php8.2-embeddedUpgrade php8.4-cli-debuginfoUpgrade php8.4-modphpUpgrade php8.4-common-debuginfoUpgrade php8.3-modphpUpgrade php8.5-dba-debuginfoUpgrade php8.5-modphpUpgrade php8.5-ffiUpgrade php8.4-sodiumUpgrade php8.5-pgsql-debuginfoUpgrade php8.3-ldap-debuginfoUpgrade php8.5-intl-debuginfoUpgrade php8.5-debuginfoUpgrade php8.3-snmpUpgrade php8.5-gmpUpgrade php8.3-soapUpgrade php8.5-cli-debuginfoUpgrade php8.5-embedded-debuginfoUpgrade php8.4-gmpUpgrade php8.5-sodium-debuginfoUpgrade php8.5-gd-debuginfoUpgrade php8.2-dba-debuginfoUpgrade php8.5-dbaUpgrade php8.2-process-debuginfoUpgrade php8.5-zipUpgrade php8.4-ldap-debuginfoUpgrade php8.5-bcmathUpgrade php8.3-dbaUpgrade php8.4-ffiUpgrade php8.2-odbcUpgrade php8.2-pgsql-debuginfoUpgrade php8.4-ffi-debuginfoUpgrade php8.3-dbgUpgrade php8.2-bcmathUpgrade php8.2-debuginfoUpgrade php8.3-gmpUpgrade php8.2-ldapUpgrade php8.4-embeddedUpgrade php8.4-tidyUpgrade php8.3-pspellUpgrade php8.5-enchant-debuginfoUpgrade php8.4-intl-debuginfoUpgrade php8.3-mbstring-debuginfoUpgrade php8.3-tidyUpgrade php8.3-gdUpgrade php8.3-pgsql-debuginfoUpgrade php8.2-gdUpgrade php8.2-pdo-debuginfoUpgrade php8.4-pdoUpgrade php8.5-common-debuginfoUpgrade php8.5-ldap-debuginfoUpgrade php8.4-mbstringUpgrade php8.5-dbg-debuginfoUpgrade php8.4-ldapUpgrade php8.4-debuginfoUpgrade php8.3-xml-debuginfoUpgrade php8.4-xmlUpgrade php8.2-processUpgrade php8.2-snmp-debuginfoUpgrade php8.3-cliUpgrade php8.2-embedded-debuginfoUpgrade php8.3-dbg-debuginfoUpgrade php8.5-tidy-debuginfoUpgrade php8.3-develUpgrade php8.3-enchant-debuginfoUpgrade php8.2-common-debuginfoUpgrade php8.5-cliUpgrade php8.4-fpmUpgrade php8.4-pgsql-debuginfoUpgrade php8.4-pgsqlUpgrade php8.3-fpm-debuginfoUpgrade php8.3-xmlUpgrade php8.4-fpm-debuginfoUpgrade php8.5-debugsourceUpgrade php8.5-mysqlndUpgrade php8.2-mbstring-debuginfoUpgrade php8.5-modphp-debuginfoUpgrade php8.5-snmpUpgrade php8.2-pdoUpgrade php8.5-enchantUpgrade php8.4-zip-debuginfoUpgrade php8.4-sodium-debuginfoUpgrade php8.5-gdUpgrade php8.5-fpm-debuginfoUpgrade php8.3-pdo-debuginfoUpgrade php8.2-opcacheUpgrade php8.5-processUpgrade php8.5-ldapUpgrade php8.5-pgsqlUpgrade php8.3-tidy-debuginfoUpgrade php8.2-dbg-debuginfoUpgrade php8.5-commonUpgrade php8.5-gmp-debuginfoUpgrade php8.4-cliUpgrade php8.3-sodium-debuginfoUpgrade php8.2-pspellUpgrade php8.2-ldap-debuginfoUpgrade php8.5-soapUpgrade php8.5-odbc-debuginfoUpgrade php8.5-bcmath-debuginfoUpgrade php8.4-processUpgrade php8.4-gmp-debuginfoUpgrade php8.4-dbaUpgrade php8.4-gd-debuginfoUpgrade php8.4-gdUpgrade php8.3-zipUpgrade php8.3-pgsqlUpgrade php8.4-dbg-debuginfoUpgrade php8.4-dba-debuginfoUpgrade php8.3-common-debuginfoUpgrade php8.3-bcmath-debuginfoUpgrade php8.2-enchant-debuginfoUpgrade php8.5-sodiumUpgrade php8.3-pdoUpgrade php8.2-bcmath-debuginfoUpgrade php8.3-pspell-debuginfoUpgrade php8.2-sodium-debuginfoUpgrade php8.5-process-debuginfoUpgrade php8.3-embedded-debuginfoUpgrade php8.2-tidy-debuginfoUpgrade php8.2-tidyUpgrade php8.2-soap-debuginfoUpgrade php8.2-soapUpgrade php8.2-pgsqlUpgrade php8.2-mbstringUpgrade php8.4-opcache-debuginfoUpgrade php8.2-fpm-debuginfoUpgrade php8.2-enchantUpgrade php8.4-xml-debuginfoUpgrade php8.4-mbstring-debuginfoUpgrade php8.5-xmlUpgrade php8.3-snmp-debuginfoUpgrade php8.2-mysqlnd-debuginfoUpgrade php8.2-gmp-debuginfoUpgrade php8.3-intl-debuginfoUpgrade php8.3-bcmathUpgrade php8.2-zip-debuginfoUpgrade php8.2-xmlUpgrade php8.2-dbgUpgrade php8.2-cli-debuginfoUpgrade php8.2-cliUpgrade php8.5-tidyUpgrade php8.5-pdoUpgrade php8.5-mysqlnd-debuginfoUpgrade php8.4-snmpUpgrade php8.4-process-debuginfoUpgrade php8.4-pdo-debuginfoUpgrade php8.3-ldapUpgrade php8.2-odbc-debuginfoUpgrade php8.2-ffiUpgrade php8.4-zipUpgrade php8.3-modphp-debuginfoUpgrade php8.2-debugsourceUpgrade php8.5-zip-debuginfoUpgrade php8.3-mysqlnd-debuginfoUpgrade php8.3-debugsourceUpgrade php8.3-cli-debuginfoUpgrade php8.2-sodiumUpgrade php8.2-gmpUpgrade php8.2-gd-debuginfoUpgrade php8.5-soap-debuginfoUpgrade php8.5-odbcUpgrade php8.5-intlUpgrade php8.5-fpmUpgrade php8.5-ffi-debuginfoUpgrade php8.5-develUpgrade php8.4-tidy-debuginfoUpgrade php8.4-soapUpgrade php8.4-snmp-debuginfoUpgrade php8.4-opcacheUpgrade php8.4-embedded-debuginfoUpgrade php8.4-debugsourceUpgrade php8.4-commonUpgrade php8.4-bcmath-debuginfoUpgrade php8.3-zip-debuginfoUpgrade php8.3-sodiumUpgrade php8.3-opcacheUpgrade php8.5-xml-debuginfoUpgrade php8.3-odbcUpgrade php8.3-ffiUpgrade php8.5Upgrade php8.2-pspell-debuginfoUpgrade php8.4-intlUpgrade php8.2-intl-debuginfoUpgrade php8.3-gmp-debuginfoUpgrade php8.3-enchantUpgrade php8.3-commonUpgrade php8.2-opcache-debuginfoUpgrade php8.2-dbaUpgrade php8.5-snmp-debuginfoUpgrade php8.5-mbstring-debuginfoUpgrade php8.5-dbgUpgrade php8.4-odbcUpgrade php8.4-enchant-debuginfoUpgrade php8.4-dbgUpgrade php8.4-bcmathUpgrade php8.3-odbc-debuginfoUpgrade php8.3-mysqlndUpgrade php8.5-pdo-debuginfoUpgrade php8.3-dba-debuginfoUpgrade php8.4-mysqlndUpgrade php8.4-modphp-debuginfoUpgrade php8.4Upgrade php8.3-intlUpgrade php8.2-zipUpgrade php8.2-snmpUpgrade php8.2-commonUpgrade php8.4-enchantUpgrade php8.3-gd-debuginfoUpgrade php8.4-develUpgrade php8.3-process-debuginfoUpgrade php8.2-develUpgrade php8.5-embeddedUpgrade php8.4-soap-debuginfoUpgrade php8.2Upgrade php8.3-soap-debuginfoUpgrade php8.3-fpm | May 28, 2026 | May 10, 2026 |
| Debian | — | Upgrade php8.2Upgrade php8.4 | May 10, 2026 | May 10, 2026 |
| Redhat_linux | — | Upgrade php-intlUpgrade php-enchantUpgrade php-ffiUpgrade php-ldapUpgrade php-soapUpgrade php-bcmathUpgrade php-ldap-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-odbcUpgrade php-soap-debuginfoUpgrade php-gmp-debuginfoUpgrade php-process-debuginfoUpgrade phpUpgrade php-commonUpgrade php-dbaUpgrade php-embedded-debuginfoUpgrade php-ffi-debuginfoUpgrade php-gd-debuginfoUpgrade php-pdo-debuginfoUpgrade php-xml-debuginfoUpgrade php-pgsqlUpgrade php-opcacheUpgrade php-mbstring-debuginfoUpgrade php-dbgUpgrade php-cli-debuginfoUpgrade php-debugsourceUpgrade php-embeddedUpgrade php-mysqlndNo solution existsUpgrade php-snmpUpgrade php-common-debuginfoUpgrade php-fpm-debuginfoUpgrade php-dba-debuginfoUpgrade php-enchant-debuginfoUpgrade php-develUpgrade php-odbc-debuginfoUpgrade php-fpmUpgrade php-gdUpgrade php-cliUpgrade php-snmp-debuginfoUpgrade php-intl-debuginfoUpgrade php-opcache-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-processUpgrade php-xmlUpgrade php-gmpUpgrade php-pdoUpgrade php-dbg-debuginfoUpgrade php-mbstring | Jun 8, 2026 | May 10, 2026 |
| Rocky_linux | — | Upgrade php-enchant-debuginfoUpgrade php-gdUpgrade php-embeddedUpgrade php-ldapUpgrade php-pdoUpgrade php-debugsourceUpgrade php-pgsqlUpgrade php-soapUpgrade php-gd-debuginfoUpgrade php-embedded-debuginfoUpgrade php-gmp-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-gmpUpgrade php-enchantUpgrade php-develUpgrade php-dbgUpgrade php-odbc-debuginfoUpgrade php-bcmathUpgrade php-pdo-debuginfoUpgrade php-fpmUpgrade php-xml-debuginfoUpgrade php-ffi-debuginfoUpgrade php-dbaUpgrade php-intl-debuginfoUpgrade php-odbcUpgrade php-ldap-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-ffiUpgrade php-snmp-debuginfoUpgrade php-process-debuginfoUpgrade php-processUpgrade php-mysqlndUpgrade php-soap-debuginfoUpgrade php-snmpUpgrade php-debuginfoUpgrade php-cli-debuginfoUpgrade php-dba-debuginfoUpgrade php-commonUpgrade php-pgsql-debuginfoUpgrade php-opcacheUpgrade php-mysqlnd-debuginfoUpgrade php-fpm-debuginfoUpgrade php-cliUpgrade php-mbstringUpgrade php-dbg-debuginfoUpgrade php-intlUpgrade phpUpgrade php-opcache-debuginfoUpgrade php-common-debuginfoUpgrade php-xml | Jun 8, 2026 | Jun 6, 2026 |
| Ubuntu | — | Upgrade php8.4Upgrade php8.3Upgrade php8.5Upgrade php8.1 | May 28, 2026 | May 28, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub