In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the metaphone() function in ext/standard/metaphone.c uses a signed int variable to track the current position within the input string. If a string longer than 2,147,483,647 bytes is passed, a signed integer overflow occurs, resulting in undefined behavior. This can lead to an out-of-bounds read, causing a segmentation fault or access to unrelated memory, and may affect the availability of the PHP process.
CVSS Details
- CVSS 4.0 Base Score: 6.3 (MEDIUM)
- CVSS 4.0 Vector: (CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:L/U:Amber)
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-processUpgrade php-mbstringUpgrade php-jsonUpgrade libzip-toolsUpgrade php-gmpUpgrade phpUpgrade php-opcacheUpgrade php-enchantUpgrade php-mysqlndUpgrade php-ffiUpgrade php-gdUpgrade php-dbaUpgrade php-pecl-apcu-develUpgrade php-xmlrpcUpgrade php-pdoUpgrade php-soapUpgrade php-pecl-zipUpgrade php-embeddedUpgrade php-pecl-rrdUpgrade libzipUpgrade php-pecl-redis6Upgrade php-snmpUpgrade php-dbgUpgrade libzip-develUpgrade php-develUpgrade php-cliUpgrade php-intlUpgrade php-pecl-xdebug3Upgrade apcu-panelUpgrade php-ldapUpgrade php-fpmUpgrade php-pearUpgrade php-pecl-xdebugUpgrade php-pecl-apcuUpgrade php-pgsqlUpgrade php-commonUpgrade php-xmlUpgrade php-bcmathUpgrade php-odbc | Jun 1, 2026 | Jun 1, 2026 |
| Alpine Linux | — | Upgrade php84Upgrade php85Upgrade php82Upgrade php81Upgrade php83 | May 15, 2026 | May 10, 2026 |
| Amazon Linux Ami 2 | — | Upgrade php-pspellUpgrade php-snmpUpgrade php-odbcUpgrade php-dbgUpgrade php-opcacheUpgrade php-ldapUpgrade php-soapUpgrade php-intlUpgrade phpUpgrade php-dbaUpgrade php-enchantUpgrade php-debuginfoUpgrade php-pgsqlUpgrade php-embeddedUpgrade php-sodiumUpgrade php-mysqlndUpgrade php-commonUpgrade php-cliUpgrade php-xmlUpgrade php-processUpgrade php-gmpUpgrade php-pdoUpgrade php-bcmathUpgrade php-develUpgrade php-fpmUpgrade php-gdUpgrade php-mbstring | Jun 8, 2026 | Jun 8, 2026 |
| Amazon_linux_2023 | — | Upgrade php8.5-embeddedUpgrade php8.4-embeddedUpgrade php8.5-cli-debuginfoUpgrade php8.5-gmpUpgrade php8.4-common-debuginfoUpgrade php8.3-mysqlnd-debuginfoUpgrade php8.3-pgsqlUpgrade php8.5-pdo-debuginfoUpgrade php8.5-pgsql-debuginfoUpgrade php8.2-gdUpgrade php8.4-sodiumUpgrade php8.5-ldapUpgrade php8.4-soapUpgrade php8.2-pgsql-debuginfoUpgrade php8.4-ffiUpgrade php8.4-ldapUpgrade php8.3-dbaUpgrade php8.3-embedded-debuginfoUpgrade php8.3-snmp-debuginfoUpgrade php8.5-tidy-debuginfoUpgrade php8.2-snmp-debuginfoUpgrade php8.2-dba-debuginfoUpgrade php8.3-mbstring-debuginfoUpgrade php8.2-process-debuginfoUpgrade php8.3-modphpUpgrade php8.2-common-debuginfoUpgrade php8.5-mbstringUpgrade php8.2-debuginfoUpgrade php8.5-enchant-debuginfoUpgrade php8.2-embedded-debuginfoUpgrade php8.5-sodium-debuginfoUpgrade php8.3-xmlUpgrade php8.5-bcmathUpgrade php8.2-mysqlndUpgrade php8.3-debuginfoUpgrade php8.3-ldap-debuginfoUpgrade php8.3-dbgUpgrade php8.5-xml-debuginfoUpgrade php8.4-debugsourceUpgrade php8.3-ffi-debuginfoUpgrade php8.2-pdoUpgrade php8.4-mysqlnd-debuginfoUpgrade php8.3-bcmathUpgrade php8.3-gd-debuginfoUpgrade php8.5-modphp-debuginfoUpgrade php8.3-tidyUpgrade php8.2-processUpgrade php8.3-cliUpgrade php8.5-enchantUpgrade php8.3-xml-debuginfoUpgrade php8.4-odbc-debuginfoUpgrade php8.2-soapUpgrade php8.4-intlUpgrade php8.4-pgsql-debuginfoUpgrade php8.2-mbstring-debuginfoUpgrade php8.3-zipUpgrade php8.2-sodiumUpgrade php8.2-xml-debuginfoUpgrade php8.4-debuginfoUpgrade php8.4-cli-debuginfoUpgrade php8.3Upgrade php8.3-opcache-debuginfoUpgrade php8.4-fpmUpgrade php8.5-dbaUpgrade php8.5-ldap-debuginfoUpgrade php8.2-ldapUpgrade php8.4-ffi-debuginfoUpgrade php8.4-fpm-debuginfoUpgrade php8.5-bcmath-debuginfoUpgrade php8.3-dbg-debuginfoUpgrade php8.3-fpm-debuginfoUpgrade php8.3-processUpgrade php8.3-pspell-debuginfoUpgrade php8.4-cliUpgrade php8.4-gdUpgrade php8.5-dbg-debuginfoUpgrade php8.3-soap-debuginfoUpgrade php8.5-modphpUpgrade php8.5-mbstring-debuginfoUpgrade php8.3-embeddedUpgrade php8.3-gmpUpgrade php8.3-pgsql-debuginfoUpgrade php8.3-bcmath-debuginfoUpgrade php8.4-intl-debuginfoUpgrade php8.2-fpmUpgrade php8.2-ffi-debuginfoUpgrade php8.5-mysqlndUpgrade php8.2-enchant-debuginfoUpgrade php8.3-pspellUpgrade php8.5-gd-debuginfoUpgrade php8.5-intl-debuginfoUpgrade php8.3-enchant-debuginfoUpgrade php8.4-snmp-debuginfoUpgrade php8.4-xmlUpgrade php8.3-gdUpgrade php8.4-mbstringUpgrade php8.2-ffiUpgrade php8.5-dba-debuginfoUpgrade php8.2-bcmathUpgrade php8.5-debugsourceUpgrade php8.2-cli-debuginfoUpgrade php8.5-fpmUpgrade php8.2-odbcUpgrade php8.3-mbstringUpgrade php8.5-common-debuginfoUpgrade php8.5-snmpUpgrade php8.2-dbgUpgrade php8.5-cliUpgrade php8.4-gd-debuginfoUpgrade php8.3-tidy-debuginfoUpgrade php8.4-embedded-debuginfoUpgrade php8.5-ffi-debuginfoUpgrade php8.3-odbcUpgrade php8.5-dbgUpgrade php8.3-zip-debuginfoUpgrade php8.2-mysqlnd-debuginfoUpgrade php8.4-process-debuginfoUpgrade php8.4-dbg-debuginfoUpgrade php8.3-sodium-debuginfoUpgrade php8.3-odbc-debuginfoUpgrade php8.3-dba-debuginfoUpgrade php8.2-zipUpgrade php8.2-tidy-debuginfoUpgrade php8.2-odbc-debuginfoUpgrade php8.2-fpm-debuginfoUpgrade php8.4-pgsqlUpgrade php8.5-ffiUpgrade php8.2-cliUpgrade php8.5-fpm-debuginfoUpgrade php8.5-commonUpgrade php8.4-snmpUpgrade php8.4-bcmath-debuginfoUpgrade php8.3-soapUpgrade php8.3-pdoUpgrade php8.4-odbcUpgrade php8.3-commonUpgrade php8.3-pdo-debuginfoUpgrade php8.2-intlUpgrade php8.3-mysqlndUpgrade php8.5-intlUpgrade php8.3-modphp-debuginfoUpgrade php8.2-pgsqlUpgrade php8.2-enchantUpgrade php8.5-pgsqlUpgrade php8.5-gdUpgrade php8.4-tidy-debuginfoUpgrade php8.4-mysqlndUpgrade php8.4-mbstring-debuginfoUpgrade php8.4-opcache-debuginfoUpgrade php8.4-gmpUpgrade php8.4-commonUpgrade php8.3-process-debuginfoUpgrade php8.4Upgrade php8.3-intlUpgrade php8.3-ffiUpgrade php8.3-enchantUpgrade php8.2-snmpUpgrade php8.2-pdo-debuginfoUpgrade php8.2-opcacheUpgrade php8.2-mbstringUpgrade php8.2-gmp-debuginfoUpgrade php8.2-bcmath-debuginfoUpgrade php8.5-odbc-debuginfoUpgrade php8.4-pdoUpgrade php8.5-sodiumUpgrade php8.5-mysqlnd-debuginfoUpgrade php8.5-develUpgrade php8.4-enchant-debuginfoUpgrade php8.4-xml-debuginfoUpgrade php8.4-gmp-debuginfoUpgrade php8.5-zipUpgrade php8.5-debuginfoUpgrade php8.4-zipUpgrade php8.2-debugsourceUpgrade php8.5-soapUpgrade php8.5-odbcUpgrade php8.5Upgrade php8.4-pdo-debuginfoUpgrade php8.3-opcacheUpgrade php8.3-ldapUpgrade php8.3-gmp-debuginfoUpgrade php8.2-soap-debuginfoUpgrade php8.4-dbgUpgrade php8.3-sodiumUpgrade php8.4-enchantUpgrade php8.4-develUpgrade php8.4-dbaUpgrade php8.3-fpmUpgrade php8.3-debugsourceUpgrade php8.2-zip-debuginfoUpgrade php8.2-xmlUpgrade php8.2-dbaUpgrade php8.2Upgrade php8.5-xmlUpgrade php8.5-snmp-debuginfoUpgrade php8.4-zip-debuginfoUpgrade php8.4-soap-debuginfoUpgrade php8.4-processUpgrade php8.4-opcacheUpgrade php8.4-modphpUpgrade php8.4-bcmathUpgrade php8.2-sodium-debuginfoUpgrade php8.4-ldap-debuginfoUpgrade php8.4-dba-debuginfoUpgrade php8.3-snmpUpgrade php8.3-intl-debuginfoUpgrade php8.2-tidyUpgrade php8.2-ldap-debuginfoUpgrade php8.2-intl-debuginfoUpgrade php8.2-develUpgrade php8.5-soap-debuginfoUpgrade php8.5-processUpgrade php8.5-gmp-debuginfoUpgrade php8.5-embedded-debuginfoUpgrade php8.4-tidyUpgrade php8.4-sodium-debuginfoUpgrade php8.4-modphp-debuginfoUpgrade php8.3-common-debuginfoUpgrade php8.3-cli-debuginfoUpgrade php8.2-gd-debuginfoUpgrade php8.2-embeddedUpgrade php8.2-commonUpgrade php8.2-opcache-debuginfoUpgrade php8.3-develUpgrade php8.2-pspell-debuginfoUpgrade php8.2-pspellUpgrade php8.2-gmpUpgrade php8.2-dbg-debuginfoUpgrade php8.5-zip-debuginfoUpgrade php8.5-tidyUpgrade php8.5-process-debuginfoUpgrade php8.5-pdo | May 28, 2026 | May 10, 2026 |
| Debian | — | Upgrade php8.2Upgrade php7.4Upgrade php8.4 | May 10, 2026 | May 10, 2026 |
| Oracle_linux | — | Upgrade php-embeddedUpgrade apcu-panelUpgrade php-dbaUpgrade libzip-toolsUpgrade php-processUpgrade php-intlUpgrade libzipUpgrade php-pecl-apcu-develUpgrade php-soapUpgrade php-pecl-rrdUpgrade php-gdUpgrade php-gmpUpgrade php-pecl-zipUpgrade php-mbstringUpgrade php-ffiUpgrade php-enchantUpgrade php-bcmathUpgrade php-pecl-xdebug3Upgrade php-pdoUpgrade php-commonUpgrade php-opcacheUpgrade php-ldapUpgrade php-snmpUpgrade php-fpmUpgrade php-develUpgrade php-dbgUpgrade phpUpgrade php-xmlUpgrade php-pearUpgrade libzip-develUpgrade php-odbcUpgrade php-pgsqlUpgrade php-pecl-apcuUpgrade php-mysqlndUpgrade php-cli | Jun 4, 2026 | May 10, 2026 |
| Redhat_linux | — | Upgrade php-intlUpgrade php-common-debuginfoUpgrade php-debuginfoUpgrade php8.4-commonUpgrade php8.4-gmp-debuginfoUpgrade php-xmlrpcUpgrade php-commonUpgrade php-process-debuginfoUpgrade php-pgsqlUpgrade php-cliUpgrade php-pecl-apcu-debuginfoUpgrade php-odbcUpgrade php8.4-mysqlndUpgrade php8.4-pgsqlUpgrade php-mbstringUpgrade php8.4-mbstringUpgrade php8.4-odbc-debuginfoUpgrade php-dba-debuginfoUpgrade php8.4-embedded-debuginfoUpgrade libzip-toolsUpgrade php-processUpgrade php-xmlUpgrade php-pecl-rrd-debuginfoUpgrade php-ldap-debuginfoUpgrade php-bcmath-debuginfoUpgrade php8.4-pdoUpgrade php8.4-dbgUpgrade php-pecl-rrdUpgrade php-intl-debuginfoUpgrade php-mysqlndUpgrade php8.4-ffi-debuginfoUpgrade php-opcache-debuginfoUpgrade libzip-develUpgrade php-pecl-redis6-debugsourceUpgrade php8.4-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-dbg-debuginfoUpgrade php-cli-debuginfoUpgrade php8.4-xml-debuginfoUpgrade php8.4-snmp-debuginfoUpgrade php8.4-dbaUpgrade php8.4-ldap-debuginfoUpgrade php-ffiUpgrade php-pecl-rrd-debugsourceUpgrade php-snmpUpgrade php8.4-pgsql-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-xml-debuginfoUpgrade php-soap-debuginfoUpgrade php-opcacheUpgrade php8.4-soap-debuginfoUpgrade php-dbaUpgrade php8.4-develUpgrade libzip-debugsourceUpgrade php8.4-gmpUpgrade php8.4-enchant-debuginfoUpgrade php8.4Upgrade php8.4-opcacheUpgrade php8.4-process-debuginfoUpgrade php-pecl-redis6-debuginfoUpgrade php8.4-enchantUpgrade php-pecl-xdebug-debugsourceUpgrade php-snmp-debuginfoUpgrade php-embeddedUpgrade php-develUpgrade php-pecl-zipUpgrade php-ffi-debuginfoUpgrade php8.4-embeddedUpgrade php-soapUpgrade php-debugsourceUpgrade php8.4-pdo-debuginfoUpgrade php8.4-fpm-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-pdoUpgrade php-ldapUpgrade php-pecl-xdebug3-debuginfoUpgrade php-embedded-debuginfoUpgrade php-fpm-debuginfoUpgrade php8.4-ffiUpgrade php-pecl-apcu-develUpgrade php8.4-ldapUpgrade php-pearUpgrade libzip-debuginfoUpgrade php8.4-xmlUpgrade php-pecl-xdebug3Upgrade phpUpgrade php8.4-gd-debuginfoUpgrade php8.4-mysqlnd-debuginfoUpgrade php-enchantUpgrade php-jsonUpgrade php-pecl-zip-debugsourceUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-xdebug3-debugsourceUpgrade php-enchant-debuginfoUpgrade php8.4-bcmath-debuginfoUpgrade php-gmpUpgrade php8.4-fpmUpgrade php-fpmUpgrade php-gd-debuginfoUpgrade php-dbgUpgrade php8.4-processUpgrade php8.4-debugsourceUpgrade php8.4-intl-debuginfoUpgrade php-pecl-redis6Upgrade apcu-panelUpgrade php8.4-cliUpgrade libzipUpgrade php8.4-odbcUpgrade php8.4-snmpUpgrade php-pecl-apcuUpgrade php8.4-common-debuginfoUpgrade php8.4-dba-debuginfoUpgrade php8.4-dbg-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-bcmathUpgrade php8.4-intlUpgrade php-pecl-xdebugUpgrade php-mbstring-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php8.4-mbstring-debuginfoUpgrade php-gdUpgrade php-pecl-zip-debuginfoUpgrade php8.4-gdUpgrade php-pdo-debuginfoUpgrade php-gmp-debuginfoUpgrade php-odbc-debuginfoUpgrade php-json-debuginfoUpgrade php8.4-opcache-debuginfoUpgrade php8.4-soapUpgrade php8.4-cli-debuginfoUpgrade php8.4-bcmath | Jun 3, 2026 | May 10, 2026 |
| Rocky_linux | — | Upgrade php-pdo-debuginfoUpgrade php8.4-pgsqlUpgrade php-pecl-redis6-debuginfoUpgrade php-opcacheUpgrade libzip-toolsUpgrade php8.4-develUpgrade php-ldap-debuginfoUpgrade php8.4-enchant-debuginfoUpgrade php8.4Upgrade php-pgsqlUpgrade php-processUpgrade php8.4-enchantUpgrade php-process-debuginfoUpgrade php-opcache-debuginfoUpgrade php-ffiUpgrade libzip-develUpgrade php8.4-snmp-debuginfoUpgrade php-soap-debuginfoUpgrade php-pecl-redis6-debugsourceUpgrade php-cliUpgrade php8.4-mysqlndUpgrade php8.4-gmpUpgrade php8.4-ffi-debuginfoUpgrade php-soapUpgrade php-snmpUpgrade php-pecl-rrdUpgrade php-intlUpgrade php-pecl-rrd-debugsourceUpgrade php8.4-odbc-debuginfoUpgrade php-dbaUpgrade php8.4-opcacheUpgrade php-mysqlndUpgrade php-cli-debuginfoUpgrade php8.4-soap-debuginfoUpgrade php8.4-mbstringUpgrade php8.4-gd-debuginfoUpgrade php-intl-debuginfoUpgrade php-dbg-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade phpUpgrade php8.4-xml-debuginfoUpgrade php8.4-process-debuginfoUpgrade php8.4-ldap-debuginfoUpgrade php8.4-gmp-debuginfoUpgrade php-gdUpgrade php-fpm-debuginfoUpgrade php8.4-embedded-debuginfoUpgrade libzip-debugsourceUpgrade php-bcmath-debuginfoUpgrade php-snmp-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-debuginfoUpgrade php8.4-pgsql-debuginfoUpgrade php8.4-dba-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php8.4-common-debuginfoUpgrade php8.4-pdoUpgrade php-mbstringUpgrade php-ffi-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php8.4-commonUpgrade php8.4-snmpUpgrade php-pecl-xdebug-debugsourceUpgrade php-pdoUpgrade php8.4-xmlUpgrade php-xmlrpc-debuginfoUpgrade php-jsonUpgrade php-enchantUpgrade php-common-debuginfoUpgrade php-pecl-xdebug3Upgrade php-develUpgrade php-enchant-debuginfoUpgrade php-ldapUpgrade php-json-debuginfoUpgrade php-odbc-debuginfoUpgrade php8.4-pdo-debuginfoUpgrade php8.4-bcmathUpgrade php8.4-intlUpgrade php8.4-fpm-debuginfoUpgrade php8.4-debugsourceUpgrade php8.4-cli-debuginfoUpgrade php8.4-bcmath-debuginfoUpgrade php-embedded-debuginfoUpgrade php8.4-opcache-debuginfoUpgrade php8.4-fpmUpgrade php8.4-dbaUpgrade php-pecl-apcu-develUpgrade php-mysqlnd-debuginfoUpgrade php-gd-debuginfoUpgrade php-fpmUpgrade php-dbgUpgrade php-mbstring-debuginfoUpgrade php8.4-soapUpgrade php8.4-mbstring-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-pecl-zipUpgrade php8.4-ffiUpgrade php-pecl-xdebug3-debugsourceUpgrade php-pecl-xdebug-debuginfoUpgrade php8.4-intl-debuginfoUpgrade php8.4-embeddedUpgrade php-gmp-debuginfoUpgrade php-debugsourceUpgrade php8.4-debuginfoUpgrade php8.4-dbg-debuginfoUpgrade php-bcmathUpgrade libzip-tools-debuginfoUpgrade php8.4-cliUpgrade php-dba-debuginfoUpgrade libzip-debuginfoUpgrade php-xmlUpgrade php-pecl-apcuUpgrade php-gmpUpgrade php-commonUpgrade php8.4-dbgUpgrade php-xmlrpcUpgrade php8.4-processUpgrade php-pecl-zip-debuginfoUpgrade php-pecl-xdebugUpgrade php-odbcUpgrade php-embeddedUpgrade libzipUpgrade php8.4-odbcUpgrade php8.4-mysqlnd-debuginfoUpgrade php-xml-debuginfoUpgrade php-pecl-xdebug3-debuginfoUpgrade php8.4-ldapUpgrade php8.4-gd | Jun 2, 2026 | Jun 1, 2026 |
| Ubuntu | — | Upgrade libphp7.0-embed (Ubuntu Pro)Upgrade php7.0-pgsql (Ubuntu Pro)Upgrade php7.0-cli (Ubuntu Pro)Upgrade php7.0-soap (Ubuntu Pro)Upgrade php8.3Upgrade php8.1Upgrade libapache2-mod-php7.0 (Ubuntu Pro)Upgrade php7.0-fpm (Ubuntu Pro)Upgrade php7.0-phpdbg (Ubuntu Pro)Upgrade php7.0-common (Ubuntu Pro)Upgrade php7.0-cgi (Ubuntu Pro)Upgrade php8.4Upgrade php8.5 | May 28, 2026 | May 28, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub