In PHP versions:8.1.* before 8.1.34, 8.2.* before 8.2.30, 8.3.* before 8.3.29, 8.4.* before 8.4.16, 8.5.* before 8.5.1, the getimagesize() function may leak uninitialized heap memory into the APPn segments (e.g., APP1) when reading images in multi-chunk mode (such as via php://filter). This occurs due to a bug in php_read_stream_all_chunks() that overwrites the buffer without advancing the pointer, leaving tail bytes uninitialized. This may lead to information disclosure of sensitive heap data and affect the confidentiality of the target server.
CVSS Details
- CVSS 4.0 Base Score: 6.3 (MEDIUM)
- CVSS 4.0 Vector: (CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X)
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-gmpUpgrade php-dbgUpgrade php-pecl-redis6Upgrade php-jsonUpgrade php-dbaUpgrade php-pecl-zipUpgrade php-pecl-apcu-develUpgrade php-pdoUpgrade php-soapUpgrade php-ldapUpgrade php-pecl-apcuUpgrade php-intlUpgrade php-odbcUpgrade php-pgsqlUpgrade php-commonUpgrade php-pearUpgrade php-enchantUpgrade php-develUpgrade php-embeddedUpgrade php-opcacheUpgrade libzip-develUpgrade php-xmlrpcUpgrade php-fpmUpgrade php-snmpUpgrade php-bcmathUpgrade apcu-panelUpgrade php-mbstringUpgrade php-gdUpgrade php-pecl-xdebug3Upgrade libzip-toolsUpgrade phpUpgrade php-cliUpgrade php-processUpgrade php-pecl-xdebugUpgrade php-pecl-rrdUpgrade libzipUpgrade php-mysqlndUpgrade php-ffiUpgrade php-xml | Feb 2, 2026 | Jan 27, 2026 |
| Alpine Linux | — | Upgrade php82Upgrade php84Upgrade php85Upgrade php83Upgrade php81 | Jan 5, 2026 | Dec 27, 2025 |
| Amazon Linux Ami 2 | — | Upgrade php-snmpUpgrade php-mysqlndUpgrade php-odbcUpgrade php-soapUpgrade php-dbaUpgrade php-ldapUpgrade php-dbgUpgrade phpUpgrade php-opcacheUpgrade php-bcmathUpgrade php-sodiumUpgrade php-enchantUpgrade php-intlUpgrade php-embeddedUpgrade php-commonUpgrade php-pgsqlUpgrade php-gdUpgrade php-mbstringUpgrade php-debuginfoUpgrade php-develUpgrade php-fpmUpgrade php-processUpgrade php-xmlUpgrade php-cliUpgrade php-pspellUpgrade php-pdoUpgrade php-gmp | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade php8.4-intlUpgrade php8.4-pdo-debuginfoUpgrade php8.1-fpmUpgrade php8.4-soapUpgrade php8.3-pgsql-debuginfoUpgrade php8.2-zipUpgrade php8.2-intlUpgrade php8.3-dbgUpgrade php8.1-mbstring-debuginfoUpgrade php8.1-pgsql-debuginfoUpgrade php8.1-mysqlnd-debuginfoUpgrade php8.1-snmp-debuginfoUpgrade php8.1-fpm-debuginfoUpgrade php8.2-fpm-debuginfoUpgrade php8.3-sodium-debuginfoUpgrade php8.4-tidyUpgrade php8.4-xmlUpgrade php8.2-pdoUpgrade php8.1-pspell-debuginfoUpgrade php8.1-xmlUpgrade php8.4-odbcUpgrade php8.2-debugsourceUpgrade php8.3-common-debuginfoUpgrade php8.2-sodiumUpgrade php8.2-ldapUpgrade php8.3-embedded-debuginfoUpgrade php8.1-pspellUpgrade php8.3-xmlUpgrade php8.4-zip-debuginfoUpgrade php8.2-pgsql-debuginfoUpgrade php8.1-opcache-debuginfoUpgrade php8.2-xmlUpgrade php8.1-develUpgrade php8.1-ldapUpgrade php8.2-gd-debuginfoUpgrade php8.2-odbcUpgrade php8.4-bcmathUpgrade php8.2-processUpgrade php8.3-odbcUpgrade php8.3-develUpgrade php8.3-dbaUpgrade php8.4-cliUpgrade php8.3-ffiUpgrade php8.3-enchant-debuginfoUpgrade php8.4-opcache-debuginfoUpgrade php8.4-sodium-debuginfoUpgrade php8.4-commonUpgrade php8.3-intlUpgrade php8.1-cliUpgrade php8.2-odbc-debuginfoUpgrade php8.4-ldapUpgrade php8.4-tidy-debuginfoUpgrade php8.4-snmpUpgrade php8.4-zipUpgrade php8.3-pdoUpgrade php8.4-debugsourceUpgrade php8.2-mysqlndUpgrade php8.3Upgrade php8.3-cliUpgrade php8.3-cli-debuginfoUpgrade php8.2-ffiUpgrade php8.3-snmp-debuginfoUpgrade php8.2-snmpUpgrade php8.1-ffiUpgrade php8.1-bcmathUpgrade php8.3-sodiumUpgrade php8.4-dbg-debuginfoUpgrade php8.1-mbstringUpgrade php8.3-tidy-debuginfoUpgrade php8.1-soapUpgrade php8.4-dbaUpgrade php8.2-common-debuginfoUpgrade php8.2-dbg-debuginfoUpgrade php8.2-gdUpgrade php8.3-processUpgrade php8.3-xml-debuginfoUpgrade php8.4-fpmUpgrade php8.4-ffiUpgrade php8.1-gmp-debuginfoUpgrade php8.3-pspell-debuginfoUpgrade php8.3-soapUpgrade php8.4-dbgUpgrade php8.2-pdo-debuginfoUpgrade php8.3-bcmathUpgrade php8.2-mysqlnd-debuginfoUpgrade php8.3-odbc-debuginfoUpgrade php8.3-snmpUpgrade php8.1-intl-debuginfoUpgrade php8.3-pspellUpgrade php8.3-bcmath-debuginfoUpgrade php8.1-ldap-debuginfoUpgrade php8.2-commonUpgrade php8.4-gmp-debuginfoUpgrade php8.3-ffi-debuginfoUpgrade php8.3-soap-debuginfoUpgrade php8.3-ldapUpgrade php8.4-fpm-debuginfoUpgrade php8.3-gmpUpgrade php8.3-dba-debuginfoUpgrade php8.1-soap-debuginfoUpgrade php8.1-dbgUpgrade php8.2-dbaUpgrade php8.3-gdUpgrade php8.4-mbstring-debuginfoUpgrade php8.4-bcmath-debuginfoUpgrade php8.4-cli-debuginfoUpgrade php8.1-gdUpgrade php8.1-mysqlndUpgrade php8.1-embeddedUpgrade php8.1-odbc-debuginfoUpgrade php8.2-cliUpgrade php8.4-gdUpgrade php8.1-dbg-debuginfoUpgrade php8.2-bcmathUpgrade php8.1-pgsqlUpgrade php8.1-xml-debuginfoUpgrade php8.1-zip-debuginfoUpgrade php8.2-ffi-debuginfoUpgrade php8.2-pspellUpgrade php8.3-fpm-debuginfoUpgrade php8.1-snmpUpgrade php8.1-dba-debuginfoUpgrade php8.4-pgsql-debuginfoUpgrade php8.3-opcacheUpgrade php8.3-zipUpgrade php8.2-gmpUpgrade php8.2-enchantUpgrade php8.4-odbc-debuginfoUpgrade php8.4-intl-debuginfoUpgrade php8.4-embedded-debuginfoUpgrade php8.3-pgsqlUpgrade php8.4-opcacheUpgrade php8.1-zipUpgrade php8.4-pgsqlUpgrade php8.4-mysqlndUpgrade php8.2-embeddedUpgrade php8.2-pgsqlUpgrade php8.4-modphpUpgrade php8.2-pspell-debuginfoUpgrade php8.1-tidyUpgrade php8.1-processUpgrade php8.1-pdo-debuginfoUpgrade php8.4-enchantUpgrade php8.3-modphpUpgrade php8.3-ldap-debuginfoUpgrade php8.2-debuginfoUpgrade php8.1-intlUpgrade php8.3-opcache-debuginfoUpgrade php8.2-dba-debuginfoUpgrade php8.3-modphp-debuginfoUpgrade php8.3-gmp-debuginfoUpgrade php8.3-fpmUpgrade php8.3-debugsourceUpgrade php8.2-soap-debuginfoUpgrade php8.2-dbgUpgrade php8.1-tidy-debuginfoUpgrade php8.1-pdoUpgrade php8.1-gmpUpgrade php8.4-pdoUpgrade php8.4-dba-debuginfoUpgrade php8.3-zip-debuginfoUpgrade php8.3-tidyUpgrade php8.4-xml-debuginfoUpgrade php8.3-intl-debuginfoUpgrade php8.2-sodium-debuginfoUpgrade php8.2-fpmUpgrade php8.1-odbcUpgrade php8.1Upgrade php8.2-zip-debuginfoUpgrade php8.2-ldap-debuginfoUpgrade php8.4-snmp-debuginfoUpgrade php8.4-process-debuginfoUpgrade php8.3-mysqlnd-debuginfoUpgrade php8.3-embeddedUpgrade php8.2-tidyUpgrade php8.2-soapUpgrade php8.2-intl-debuginfoUpgrade php8.2Upgrade php8.4-modphp-debuginfoUpgrade php8.4-ffi-debuginfoUpgrade php8.3-process-debuginfoUpgrade php8.3-mysqlndUpgrade php8.3-gd-debuginfoUpgrade php8.3-dbg-debuginfoUpgrade php8.2-gmp-debuginfoUpgrade php8.1-gd-debuginfoUpgrade php8.1-ffi-debuginfoUpgrade php8.1-enchant-debuginfoUpgrade php8.1-common-debuginfoUpgrade php8.3-debuginfoUpgrade php8.4Upgrade php8.2-xml-debuginfoUpgrade php8.1-enchantUpgrade php8.4-processUpgrade php8.4-mysqlnd-debuginfoUpgrade php8.4-mbstringUpgrade php8.4-gmpUpgrade php8.3-mbstringUpgrade php8.2-process-debuginfoUpgrade php8.2-mbstringUpgrade php8.2-bcmath-debuginfoUpgrade php8.1-embedded-debuginfoUpgrade php8.1-debugsourceUpgrade php8.1-commonUpgrade php8.4-debuginfoUpgrade php8.2-tidy-debuginfoUpgrade php8.2-opcache-debuginfoUpgrade php8.2-opcacheUpgrade php8.2-enchant-debuginfoUpgrade php8.2-embedded-debuginfoUpgrade php8.2-develUpgrade php8.1-process-debuginfoUpgrade php8.1-debuginfoUpgrade php8.1-dbaUpgrade php8.4-develUpgrade php8.3-mbstring-debuginfoUpgrade php8.3-enchantUpgrade php8.3-commonUpgrade php8.1-bcmath-debuginfoUpgrade php8.4-soap-debuginfoUpgrade php8.3-pdo-debuginfoUpgrade php8.2-snmp-debuginfoUpgrade php8.1-opcacheUpgrade php8.1-cli-debuginfoUpgrade php8.4-ldap-debuginfoUpgrade php8.4-gd-debuginfoUpgrade php8.4-enchant-debuginfoUpgrade php8.4-embeddedUpgrade php8.2-mbstring-debuginfoUpgrade php8.4-sodiumUpgrade php8.2-cli-debuginfoUpgrade php8.4-common-debuginfo | Jan 12, 2026 | Dec 27, 2025 |
| Debian | — | Upgrade php8.4Upgrade php8.2 | Mar 4, 2026 | Mar 4, 2026 |
| Oracle_linux | — | Upgrade php-pecl-apcu-develUpgrade php-mbstringUpgrade php-develUpgrade php-pecl-rrdUpgrade php-fpmUpgrade php-pearUpgrade php-xmlUpgrade php-pecl-xdebug3Upgrade php-jsonUpgrade php-processUpgrade php-pecl-xdebugUpgrade php-commonUpgrade php-xmlrpcUpgrade php-gmpUpgrade php-dbaUpgrade libzip-toolsUpgrade php-embeddedUpgrade php-intlUpgrade php-pecl-zipUpgrade php-odbcUpgrade php-enchantUpgrade php-cliUpgrade php-mysqlndUpgrade phpUpgrade php-pgsqlUpgrade php-bcmathUpgrade php-snmpUpgrade php-soapUpgrade libzipUpgrade php-dbgUpgrade libzip-develUpgrade apcu-panelUpgrade php-opcacheUpgrade php-ldapUpgrade php-ffiUpgrade php-pecl-redis6Upgrade php-gdUpgrade php-pecl-apcuUpgrade php-pdo | Jan 29, 2026 | Dec 27, 2025 |
| Redhat_linux | — | Upgrade libzip-toolsUpgrade php-processUpgrade php-snmp-debuginfoUpgrade php-pecl-xdebug3-debugsourceUpgrade php-mysqlnd-debuginfoUpgrade php-pecl-redis6-debugsourceUpgrade php-soapUpgrade php-fpm-debuginfoUpgrade php-bcmathUpgrade libzip-debuginfoUpgrade php-enchantUpgrade php-ffi-debuginfoUpgrade php-intl-debuginfoUpgrade php-process-debuginfoUpgrade php-pecl-zipUpgrade php-pecl-redis6-debuginfoUpgrade php-jsonUpgrade libzipUpgrade php-pdo-debuginfoUpgrade php-dba-debuginfoUpgrade php-intlUpgrade libzip-tools-debuginfoUpgrade php-dbaUpgrade php-bcmath-debuginfoUpgrade php-ldap-debuginfoUpgrade apcu-panelUpgrade php-gdUpgrade php-pgsqlUpgrade php-pecl-rrdUpgrade php-opcache-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-json-debuginfoUpgrade php-debugsourceUpgrade php-odbcUpgrade php-pecl-zip-debugsourceUpgrade php-xml-debuginfoUpgrade php-odbc-debuginfoUpgrade php-gmpUpgrade php-cli-debuginfoUpgrade php-gd-debuginfoUpgrade php-pdoUpgrade php-ffiUpgrade php-pecl-apcu-develUpgrade libzip-debugsourceUpgrade php-pecl-apcu-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-gmp-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-develUpgrade php-fpmUpgrade php-ldapUpgrade php-pearUpgrade php-pecl-xdebug3Upgrade php-pecl-rrd-debuginfoUpgrade php-dbgUpgrade php-embedded-debuginfoUpgrade libzip-develUpgrade php-pecl-xdebug-debugsourceUpgrade php-dbg-debuginfoUpgrade php-pecl-zip-debuginfoNo solution existsUpgrade php-snmpUpgrade php-cliUpgrade php-enchant-debuginfoUpgrade php-xmlUpgrade php-pecl-apcuUpgrade php-debuginfoUpgrade php-common-debuginfoUpgrade php-xmlrpcUpgrade php-mbstringUpgrade php-mysqlndUpgrade php-commonUpgrade php-pecl-xdebug-debuginfoUpgrade php-opcacheUpgrade php-soap-debuginfoUpgrade php-pecl-redis6Upgrade php-pecl-xdebug3-debuginfoUpgrade php-pecl-xdebugUpgrade phpUpgrade php-embeddedUpgrade php-pecl-rrd-debugsource | Jan 28, 2026 | Dec 27, 2025 |
| Rocky_linux | — | Upgrade php-ldapUpgrade php-develUpgrade php-pecl-zip-debugsourceUpgrade php-xml-debuginfoUpgrade php-cliUpgrade php-pdoUpgrade php-pecl-redis6Upgrade php-enchant-debuginfoUpgrade libzip-develUpgrade php-fpmUpgrade libzip-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-pecl-zip-debuginfoUpgrade php-snmpUpgrade php-pecl-rrd-debugsourceUpgrade php-ffi-debuginfoUpgrade php-odbcUpgrade php-pecl-apcuUpgrade php-json-debuginfoUpgrade php-pecl-xdebug3Upgrade php-dba-debuginfoUpgrade php-opcacheUpgrade php-xmlUpgrade php-common-debuginfoUpgrade phpUpgrade php-bcmathUpgrade php-pecl-xdebug3-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-mbstring-debuginfoUpgrade php-pecl-xdebugUpgrade php-gmp-debuginfoUpgrade php-mysqlndUpgrade php-pecl-xdebug-debuginfoUpgrade php-commonUpgrade php-pecl-rrd-debuginfoUpgrade php-dbgUpgrade php-mbstringUpgrade php-gdUpgrade php-soapUpgrade php-ffiUpgrade php-enchantUpgrade libzip-debugsourceUpgrade php-xmlrpc-debuginfoUpgrade libzip-toolsUpgrade php-gd-debuginfoUpgrade php-soap-debuginfoUpgrade php-pecl-redis6-debuginfoUpgrade php-xmlrpcUpgrade php-fpm-debuginfoUpgrade php-opcache-debuginfoUpgrade php-intlUpgrade php-pgsql-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-intl-debuginfoUpgrade php-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-debugsourceUpgrade php-pdo-debuginfoUpgrade php-dbg-debuginfoUpgrade php-process-debuginfoUpgrade php-processUpgrade php-pgsqlUpgrade php-pecl-xdebug3-debugsourceUpgrade libzipUpgrade php-pecl-zipUpgrade php-pecl-redis6-debugsourceUpgrade php-ldap-debuginfoUpgrade php-jsonUpgrade php-gmpUpgrade php-dbaUpgrade php-bcmath-debuginfoUpgrade php-odbc-debuginfoUpgrade php-cli-debuginfoUpgrade php-embedded-debuginfoUpgrade php-embeddedUpgrade php-snmp-debuginfoUpgrade php-pecl-rrdUpgrade php-pecl-apcu-devel | Jan 29, 2026 | Jan 28, 2026 |
| Ubuntu | — | Upgrade php7.2 (Ubuntu Pro)Upgrade php7.4 (Ubuntu Pro)Upgrade php8.1Upgrade php8.4Upgrade php8.3 | Jan 13, 2026 | Dec 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub