In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the metaphone() function in ext/standard/metaphone.c uses a signed int variable to track the current position within the input string. If a string longer than 2,147,483,647 bytes is passed, a signed integer overflow occurs, resulting in undefined behavior. This can lead to an out-of-bounds read, causing a segmentation fault or access to unrelated memory, and may affect the availability of the PHP process.
CVSS Details
- CVSS 4.0 Base Score: 6.3 (MEDIUM)
- CVSS 4.0 Vector: (CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:L/U:Amber)
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-bcmathUpgrade php-pecl-redis6Upgrade php-xmlUpgrade php-snmpUpgrade php-dbgUpgrade libzip-develUpgrade php-commonUpgrade apcu-panelUpgrade php-develUpgrade php-fpmUpgrade php-cliUpgrade php-ldapUpgrade php-intlUpgrade php-pearUpgrade php-pecl-apcuUpgrade php-pgsqlUpgrade php-pecl-xdebug3Upgrade php-odbcUpgrade php-pecl-xdebugUpgrade php-enchantUpgrade php-mbstringUpgrade php-pecl-zipUpgrade libzipUpgrade phpUpgrade php-embeddedUpgrade php-soapUpgrade php-pdoUpgrade php-processUpgrade php-pecl-rrdUpgrade php-jsonUpgrade php-opcacheUpgrade php-gmpUpgrade libzip-toolsUpgrade php-ffiUpgrade php-dbaUpgrade php-xmlrpcUpgrade php-pecl-apcu-develUpgrade php-gdUpgrade php-mysqlnd | Jun 1, 2026 | Jun 1, 2026 |
| Alpine Linux | — | Upgrade php84Upgrade php85Upgrade php82Upgrade php83Upgrade php81 | May 15, 2026 | May 10, 2026 |
| Amazon Linux Ami 2 | — | Upgrade php-bcmathUpgrade php-develUpgrade php-gmpUpgrade php-processUpgrade php-pdoUpgrade php-mbstringUpgrade php-fpmUpgrade php-gdUpgrade php-xmlUpgrade php-enchantUpgrade php-intlUpgrade php-soapUpgrade php-mysqlndUpgrade phpUpgrade php-snmpUpgrade php-pspellUpgrade php-odbcUpgrade php-dbgUpgrade php-dbaUpgrade php-cliUpgrade php-sodiumUpgrade php-opcacheUpgrade php-pgsqlUpgrade php-embeddedUpgrade php-debuginfoUpgrade php-ldapUpgrade php-common | Jun 8, 2026 | Jun 8, 2026 |
| Amazon_linux_2023 | — | Upgrade php8.5-bcmath-debuginfoUpgrade php8.4-fpm-debuginfoUpgrade php8.4-pgsql-debuginfoUpgrade php8.5-dbaUpgrade php8.2-cli-debuginfoUpgrade php8.2-soapUpgrade php8.2-xml-debuginfoUpgrade php8.5-snmpUpgrade php8.4-mbstringUpgrade php8.4-mysqlnd-debuginfoUpgrade php8.5-dba-debuginfoUpgrade php8.5-debugsourceUpgrade php8.4-xmlUpgrade php8.5-fpmUpgrade php8.2-odbcUpgrade php8.3-gdUpgrade php8.5-common-debuginfoUpgrade php8.2-dba-debuginfoUpgrade php8.5-bcmathUpgrade php8.5-enchant-debuginfoUpgrade php8.3-xmlUpgrade php8.5-mbstringUpgrade php8.2-sodiumUpgrade php8.3-snmp-debuginfoUpgrade php8.5-tidy-debuginfoUpgrade php8.2-debuginfoUpgrade php8.2-mysqlndUpgrade php8.2-pdoUpgrade php8.3-bcmathUpgrade php8.2-process-debuginfoUpgrade php8.4-ffi-debuginfoUpgrade php8.4-fpmUpgrade php8.3-zipUpgrade php8.2-snmp-debuginfoUpgrade php8.3-gd-debuginfoUpgrade php8.3-tidyUpgrade php8.3Upgrade php8.3-xml-debuginfoUpgrade php8.5-ldap-debuginfoUpgrade php8.4-debuginfoUpgrade php8.3-modphpUpgrade php8.2-embedded-debuginfoUpgrade php8.3-enchant-debuginfoUpgrade php8.3-pspellUpgrade php8.2-ffiUpgrade php8.4-snmp-debuginfoUpgrade php8.5-mbstring-debuginfoUpgrade php8.5-modphp-debuginfoUpgrade php8.4-intlUpgrade php8.5-cliUpgrade php8.2-pgsql-debuginfoUpgrade php8.2-processUpgrade php8.2-ffi-debuginfoUpgrade php8.3-dbaUpgrade php8.5-enchantUpgrade php8.5-gd-debuginfoUpgrade php8.3-embeddedUpgrade php8.3-gmpUpgrade php8.5-intl-debuginfoUpgrade php8.5-ldapUpgrade php8.2-dbgUpgrade php8.4-debugsourceUpgrade php8.3-bcmath-debuginfoUpgrade php8.4-common-debuginfoUpgrade php8.4-ffiUpgrade php8.3-mbstringUpgrade php8.4-odbc-debuginfoUpgrade php8.3-mbstring-debuginfoUpgrade php8.3-soap-debuginfoUpgrade php8.2-enchant-debuginfoUpgrade php8.3-processUpgrade php8.3-pgsql-debuginfoUpgrade php8.3-debuginfoUpgrade php8.2-fpmUpgrade php8.2-ldapUpgrade php8.3-dbg-debuginfoUpgrade php8.4-sodiumUpgrade php8.3-fpm-debuginfoUpgrade php8.4-intl-debuginfoUpgrade php8.4-ldapUpgrade php8.4-soapUpgrade php8.3-opcache-debuginfoUpgrade php8.5-embeddedUpgrade php8.5-gmpUpgrade php8.5-cli-debuginfoUpgrade php8.5-pdo-debuginfoUpgrade php8.2-gdUpgrade php8.4-embeddedUpgrade php8.5-pgsql-debuginfoUpgrade php8.5-sodium-debuginfoUpgrade php8.3-ffi-debuginfoUpgrade php8.3-ldap-debuginfoUpgrade php8.3-embedded-debuginfoUpgrade php8.3-mysqlnd-debuginfoUpgrade php8.2-mbstring-debuginfoUpgrade php8.3-cliUpgrade php8.3-dbgUpgrade php8.3-pspell-debuginfoUpgrade php8.3-pgsqlUpgrade php8.4-cliUpgrade php8.5-xml-debuginfoUpgrade php8.4-cli-debuginfoUpgrade php8.2-common-debuginfoUpgrade php8.2-bcmathUpgrade php8.4-gdUpgrade php8.5-dbg-debuginfoUpgrade php8.5-mysqlndUpgrade php8.5-modphpUpgrade php8.2-ldap-debuginfoUpgrade php8.2-intl-debuginfoUpgrade php8.5-processUpgrade php8.4-xml-debuginfoUpgrade php8.4-gmp-debuginfoUpgrade php8.2-sodium-debuginfoUpgrade php8.5-gmp-debuginfoUpgrade php8.5-embedded-debuginfoUpgrade php8.4-ldap-debuginfoUpgrade php8.2-develUpgrade php8.4-sodium-debuginfoUpgrade php8.5-snmp-debuginfoUpgrade php8.4-soap-debuginfoUpgrade php8.4-processUpgrade php8.4-opcacheUpgrade php8.4-modphpUpgrade php8.4-enchantUpgrade php8.4-develUpgrade php8.4-dbaUpgrade php8.4-bcmathUpgrade php8.3-fpmUpgrade php8.3-debugsourceUpgrade php8.2-zip-debuginfoUpgrade php8.2-xmlUpgrade php8.2-dbaUpgrade php8.2Upgrade php8.2-intlUpgrade php8.5-zipUpgrade php8.4-odbcUpgrade php8.3-pdoUpgrade php8.3-odbc-debuginfoUpgrade php8.3-dba-debuginfoUpgrade php8.3-commonUpgrade php8.2-zipUpgrade php8.2-tidy-debuginfoUpgrade php8.2-odbc-debuginfoUpgrade php8.2-fpm-debuginfoUpgrade php8.2-cliUpgrade php8.5-fpm-debuginfoUpgrade php8.5-ffiUpgrade php8.4-snmpUpgrade php8.4-pgsqlUpgrade php8.4-bcmath-debuginfoUpgrade php8.3-soapUpgrade php8.3-pdo-debuginfoUpgrade php8.3-tidy-debuginfoUpgrade php8.3-mysqlndUpgrade php8.2-pspell-debuginfoUpgrade php8.2-pspellUpgrade php8.2-opcache-debuginfoUpgrade php8.2-gmpUpgrade php8.2-dbg-debuginfoUpgrade php8.5-zip-debuginfoUpgrade php8.5-tidyUpgrade php8.5-process-debuginfoUpgrade php8.5-debuginfoUpgrade php8.5-dbgUpgrade php8.4-gd-debuginfoUpgrade php8.3-develUpgrade php8.4-zip-debuginfoUpgrade php8.5-xmlUpgrade php8.5-commonUpgrade php8.5-pdoUpgrade php8.4-enchant-debuginfoUpgrade php8.5-develUpgrade php8.5-sodiumUpgrade php8.5-mysqlnd-debuginfoUpgrade php8.5-odbc-debuginfoUpgrade php8.4-pdoUpgrade php8.4Upgrade php8.3-intlUpgrade php8.3-ffiUpgrade php8.2-snmpUpgrade php8.2-pdo-debuginfoUpgrade php8.2-opcacheUpgrade php8.2-gmp-debuginfoUpgrade php8.2-bcmath-debuginfoUpgrade php8.2-mbstringUpgrade php8.3-enchantUpgrade php8.4-mysqlndUpgrade php8.4-mbstring-debuginfoUpgrade php8.4-opcache-debuginfoUpgrade php8.4-gmpUpgrade php8.3-process-debuginfoUpgrade php8.4-commonUpgrade php8.3-modphp-debuginfoUpgrade php8.2-pgsqlUpgrade php8.2-enchantUpgrade php8.5-pgsqlUpgrade php8.5-gdUpgrade php8.4-tidy-debuginfoUpgrade php8.4-tidyUpgrade php8.4-dba-debuginfoUpgrade php8.3-opcacheUpgrade php8.5-soapUpgrade php8.5-odbcUpgrade php8.5-ffi-debuginfoUpgrade php8.5Upgrade php8.4-pdo-debuginfoUpgrade php8.4-dbgUpgrade php8.3-odbcUpgrade php8.3-ldapUpgrade php8.3-gmp-debuginfoUpgrade php8.3-sodiumUpgrade php8.2-soap-debuginfoUpgrade php8.2-debugsourceUpgrade php8.5-soap-debuginfoUpgrade php8.2-mysqlnd-debuginfoUpgrade php8.2-gd-debuginfoUpgrade php8.2-embeddedUpgrade php8.5-intlUpgrade php8.4-zipUpgrade php8.4-process-debuginfoUpgrade php8.2-commonUpgrade php8.4-dbg-debuginfoUpgrade php8.3-cli-debuginfoUpgrade php8.3-zip-debuginfoUpgrade php8.3-sodium-debuginfoUpgrade php8.3-common-debuginfoUpgrade php8.4-embedded-debuginfoUpgrade php8.4-modphp-debuginfoUpgrade php8.3-snmpUpgrade php8.3-intl-debuginfoUpgrade php8.2-tidy | May 28, 2026 | May 10, 2026 |
| Debian | — | Upgrade php7.4Upgrade php8.4Upgrade php8.2 | May 10, 2026 | May 10, 2026 |
| Oracle_linux | — | Upgrade php-commonUpgrade php-bcmathUpgrade php-snmpUpgrade php-cliUpgrade php-pecl-apcuUpgrade php-pecl-xdebug3Upgrade php-opcacheUpgrade php-ldapUpgrade php-xmlUpgrade php-develUpgrade php-dbgUpgrade php-pdoUpgrade php-fpmUpgrade phpUpgrade php-pgsqlUpgrade php-odbcUpgrade libzip-develUpgrade php-pearUpgrade php-mysqlndUpgrade php-processUpgrade php-embeddedUpgrade apcu-panelUpgrade php-pecl-zipUpgrade php-pecl-rrdUpgrade php-soapUpgrade php-dbaUpgrade libzip-toolsUpgrade php-gmpUpgrade php-gdUpgrade php-mbstringUpgrade php-ffiUpgrade php-enchantUpgrade php-intlUpgrade libzipUpgrade php-pecl-apcu-devel | Jun 4, 2026 | May 10, 2026 |
| Redhat_linux | — | Upgrade php8.4-develUpgrade php8.4-pgsql-debuginfoUpgrade php-dbaUpgrade php-mysqlnd-debuginfoUpgrade php-snmpUpgrade php-xmlrpcUpgrade php-opcacheUpgrade php8.4-ffi-debuginfoUpgrade php-xml-debuginfoUpgrade libzip-develUpgrade php-intl-debuginfoUpgrade php-soap-debuginfoUpgrade php-commonUpgrade php-ffiUpgrade php-mbstringUpgrade php-snmp-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-pecl-redis6-debuginfoUpgrade php8.4-dbaUpgrade php8.4-enchant-debuginfoUpgrade php8.4-ldap-debuginfoUpgrade libzip-debugsourceUpgrade php8.4-soap-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-debuginfoUpgrade php-ldap-debuginfoUpgrade php-pecl-rrdUpgrade php-xmlUpgrade php-processUpgrade php8.4-dbgUpgrade php-pecl-xdebug-debugsourceUpgrade php8.4-enchantUpgrade php8.4-pdoUpgrade php8.4-gmpUpgrade php8.4-gmp-debuginfoUpgrade php8.4-process-debuginfoUpgrade php-dbg-debuginfoUpgrade php-cli-debuginfoUpgrade php-mysqlndUpgrade php-common-debuginfoUpgrade php-opcache-debuginfoUpgrade php-pecl-redis6-debugsourceUpgrade php-pgsql-debuginfoUpgrade php8.4-debuginfoUpgrade php8.4-snmp-debuginfoUpgrade php8.4-xml-debuginfoUpgrade php8.4-embedded-debuginfoUpgrade php8.4-commonUpgrade php-dba-debuginfoUpgrade php8.4-odbc-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php8.4-mbstringUpgrade php8.4-opcacheUpgrade libzip-toolsUpgrade php-odbcUpgrade php-intlUpgrade php-pecl-apcu-debuginfoUpgrade php8.4Upgrade php8.4-mysqlndUpgrade php8.4-pgsqlUpgrade php-cliUpgrade php-pgsqlUpgrade php-process-debuginfoUpgrade php-enchantUpgrade php-xmlrpc-debuginfoUpgrade php8.4-intlUpgrade php-gmpUpgrade php-pearUpgrade php-pecl-xdebug3Upgrade php-enchant-debuginfoUpgrade php-bcmathUpgrade php8.4-bcmathUpgrade php-pecl-zip-debuginfoUpgrade php-pecl-xdebugUpgrade php8.4-soapUpgrade php8.4-cli-debuginfoUpgrade php-gmp-debuginfoUpgrade libzip-debuginfoUpgrade php8.4-bcmath-debuginfoUpgrade php-json-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-soapUpgrade php-fpmUpgrade php8.4-debugsourceUpgrade php-pdo-debuginfoUpgrade php-odbc-debuginfoUpgrade php8.4-intl-debuginfoUpgrade php8.4-processUpgrade php-mbstring-debuginfoUpgrade php-gdUpgrade php8.4-opcache-debuginfoUpgrade php8.4-mbstring-debuginfoUpgrade php8.4-gdUpgrade phpUpgrade php8.4-ffiUpgrade php8.4-cliUpgrade php8.4-xmlUpgrade php8.4-odbcUpgrade php-pecl-apcuUpgrade php-pecl-apcu-develUpgrade libzipUpgrade libzip-tools-debuginfoUpgrade php8.4-snmpUpgrade php-fpm-debuginfoUpgrade php-pecl-xdebug3-debugsourceUpgrade php-pdoUpgrade php8.4-pdo-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-ldapUpgrade php-ffi-debuginfoUpgrade php8.4-embeddedUpgrade php8.4-fpm-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-debugsourceUpgrade php-embeddedUpgrade php-jsonUpgrade php-pecl-zipUpgrade php-pecl-xdebug3-debuginfoUpgrade php8.4-fpmUpgrade php8.4-mysqlnd-debuginfoUpgrade php8.4-gd-debuginfoUpgrade php8.4-dba-debuginfoUpgrade php-dbgUpgrade php8.4-ldapUpgrade php-embedded-debuginfoUpgrade apcu-panelUpgrade php8.4-dbg-debuginfoUpgrade php-develUpgrade php8.4-common-debuginfoUpgrade php-pecl-redis6Upgrade php-gd-debuginfo | Jun 3, 2026 | May 10, 2026 |
| Rocky_linux | — | Upgrade php8.4-debugsourceUpgrade php-odbc-debuginfoUpgrade php8.4-cli-debuginfoUpgrade php8.4-mbstring-debuginfoUpgrade php-xmlrpcUpgrade php-xmlUpgrade php-pecl-apcuUpgrade php8.4-bcmath-debuginfoUpgrade php8.4-bcmathUpgrade php8.4-pdo-debuginfoUpgrade php8.4-intlUpgrade php8.4-fpm-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-pecl-zipUpgrade php-mbstring-debuginfoUpgrade php-json-debuginfoUpgrade php-ffi-debuginfoUpgrade php-dbgUpgrade php-ldapUpgrade php8.4-soapUpgrade php-debugsourceUpgrade php8.4-dbg-debuginfoUpgrade php8.4-cliUpgrade php-dba-debuginfoUpgrade php-bcmathUpgrade libzip-tools-debuginfoUpgrade libzip-debuginfoUpgrade php8.4-xmlUpgrade php8.4-intl-debuginfoUpgrade php8.4-embeddedUpgrade php8.4-dbaUpgrade php-fpmUpgrade php-mysqlnd-debuginfoUpgrade php-gd-debuginfoUpgrade php-embedded-debuginfoUpgrade php8.4-opcache-debuginfoUpgrade php8.4-fpmUpgrade php-pecl-apcu-develUpgrade php8.4-debuginfoUpgrade php-gmp-debuginfoUpgrade php8.4-snmpUpgrade php8.4-ffiUpgrade php8.4-commonUpgrade php-pecl-xdebug3-debugsourceUpgrade php-pecl-xdebug-debugsourceUpgrade php-pecl-rrd-debuginfoUpgrade php-pdoUpgrade php-pecl-xdebug-debuginfoUpgrade php-pecl-xdebug3-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-common-debuginfoUpgrade php8.4-ldapUpgrade php-jsonUpgrade php-enchantUpgrade php8.4-gdUpgrade php-xml-debuginfoUpgrade php-pecl-xdebug3Upgrade php-odbcUpgrade php-enchant-debuginfoUpgrade php-embeddedUpgrade php-develUpgrade libzipUpgrade php8.4-mysqlnd-debuginfoUpgrade php8.4-odbcUpgrade php8.4-processUpgrade php-pecl-zip-debuginfoUpgrade php-pecl-xdebugUpgrade php8.4-dbgUpgrade php-gmpUpgrade php-commonUpgrade php8.4Upgrade php8.4-opcacheUpgrade php-mysqlndUpgrade libzip-develUpgrade php8.4-common-debuginfoUpgrade php-soap-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-debuginfoUpgrade php-pgsqlUpgrade php8.4-pgsql-debuginfoUpgrade php-pecl-redis6-debugsourceUpgrade php-cliUpgrade libzip-toolsUpgrade php-dbaUpgrade php8.4-snmp-debuginfoUpgrade php8.4-ldap-debuginfoUpgrade php8.4-xml-debuginfoUpgrade php8.4-process-debuginfoUpgrade php8.4-pdoUpgrade php8.4-gmp-debuginfoUpgrade php-pdo-debuginfoUpgrade php-fpm-debuginfoUpgrade php-ffiUpgrade phpUpgrade php-gdUpgrade php8.4-enchant-debuginfoUpgrade php-opcache-debuginfoUpgrade php-opcacheUpgrade php8.4-enchantUpgrade php-process-debuginfoUpgrade php8.4-mbstringUpgrade php-pecl-apcu-debugsourceUpgrade php-intl-debuginfoUpgrade php8.4-odbc-debuginfoUpgrade php8.4-mysqlndUpgrade php-cli-debuginfoUpgrade php8.4-soap-debuginfoUpgrade php8.4-pgsqlUpgrade php8.4-gd-debuginfoUpgrade php-pecl-redis6-debuginfoUpgrade php-dbg-debuginfoUpgrade php8.4-gmpUpgrade php8.4-ffi-debuginfoUpgrade php8.4-develUpgrade php8.4-dba-debuginfoUpgrade php-snmpUpgrade php-pecl-rrd-debugsourceUpgrade php-pecl-rrdUpgrade php-soapUpgrade php-mbstringUpgrade php-intlUpgrade php-processUpgrade php-pgsql-debuginfoUpgrade php-ldap-debuginfoUpgrade php-bcmath-debuginfoUpgrade libzip-debugsourceUpgrade php8.4-embedded-debuginfoUpgrade php-snmp-debuginfo | Jun 2, 2026 | Jun 1, 2026 |
| Ubuntu | — | Upgrade php8.3Upgrade php7.0-pgsql (Ubuntu Pro)Upgrade php7.0-soap (Ubuntu Pro)Upgrade php7.0-cli (Ubuntu Pro)Upgrade libphp7.0-embed (Ubuntu Pro)Upgrade php7.0-common (Ubuntu Pro)Upgrade php7.0-phpdbg (Ubuntu Pro)Upgrade php7.0-fpm (Ubuntu Pro)Upgrade php8.1Upgrade php7.0-cgi (Ubuntu Pro)Upgrade php8.4Upgrade libapache2-mod-php7.0 (Ubuntu Pro)Upgrade php8.5 | May 28, 2026 | May 28, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub