Поиск уязвимостей
Количество 89
Количество 89
CVE-2026-7568
In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the metaphone() function in ext/standard/metaphone.c uses a signed int variable to track the current position within the input string. If a string longer than 2,147,483,647 bytes is passed, a signed integer overflow occurs, resulting in undefined behavior. This can lead to an out-of-bounds read, causing a segmentation fault or access to unrelated memory, and may affect the availability of the PHP process.
CVE-2026-7568
In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the metaphone() function in ext/standard/metaphone.c uses a signed int variable to track the current position within the input string. If a string longer than 2,147,483,647 bytes is passed, a signed integer overflow occurs, resulting in undefined behavior. This can lead to an out-of-bounds read, causing a segmentation fault or access to unrelated memory, and may affect the availability of the PHP process.
CVE-2026-7568
Signed integer overflow in metaphone()
CVE-2026-7568
In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before ...
CVE-2026-7262
In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, when a SOAP server has a typemap configured, the decoding process contains a mistake which checks the wrong variable in case of missing value element. This leads to dereferences a NULL pointer, causing a segmentation fault. This allows a remote unauthenticated attacker to crash the PHP SOAP server process, resulting in denial of service.
CVE-2026-7262
In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, when a SOAP server has a typemap configured, the decoding process contains a mistake which checks the wrong variable in case of missing value element. This leads to dereferences a NULL pointer, causing a segmentation fault. This allows a remote unauthenticated attacker to crash the PHP SOAP server process, resulting in denial of service.
CVE-2026-7262
In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, when a SOAP server has a typemap configured, the decoding process contains a mistake which checks the wrong variable in case of missing value element. This leads to dereferences a NULL pointer, causing a segmentation fault. This allows a remote unauthenticated attacker to crash the PHP SOAP server process, resulting in denial of service.
CVE-2026-7262
NULL pointer dereference in SOAP apache:Map decoder with missing <value>
CVE-2026-7262
In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before ...
ROS-20260901-80-0012
Уязвимость php 8.5
ROS-20260901-80-0011
Уязвимость php 8.4
ROS-20260901-80-0010
Уязвимость php 8.3
ROS-20260901-80-0009
Уязвимость php
ROS-20260901-73-0009
Уязвимость php 8.4
ROS-20260901-73-0008
Уязвимость php 8.3
ROS-20260901-73-0007
Уязвимость php
GHSA-hmxp-6pc4-f3vv
NULL pointer dereference in SOAP apache:Map decoder with missing <value>
GHSA-96wq-48vp-hh57
Signed integer overflow in metaphone()
BDU:2026-15493
Уязвимость интерпретатора языка PHP, связанная с разыменованием нулевого указателя, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2026-01641
Уязвимость функции metaphone() интерпретатора языка программирования PHP, позволяющая нарушителю вызвать ошибку сегментации и вызвать отказ в обслуживании
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-7568 In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the metaphone() function in ext/standard/metaphone.c uses a signed int variable to track the current position within the input string. If a string longer than 2,147,483,647 bytes is passed, a signed integer overflow occurs, resulting in undefined behavior. This can lead to an out-of-bounds read, causing a segmentation fault or access to unrelated memory, and may affect the availability of the PHP process. | CVSS3: 7.5 | 0% Низкий | 6 месяцев назад |
 | CVE-2026-7568 In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the metaphone() function in ext/standard/metaphone.c uses a signed int variable to track the current position within the input string. If a string longer than 2,147,483,647 bytes is passed, a signed integer overflow occurs, resulting in undefined behavior. This can lead to an out-of-bounds read, causing a segmentation fault or access to unrelated memory, and may affect the availability of the PHP process. | CVSS3: 7.5 | 0% Низкий | 6 месяцев назад |
 | CVE-2026-7568 Signed integer overflow in metaphone() | 0% Низкий | 5 месяцев назад | |
| CVE-2026-7568 In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before ... | CVSS3: 7.5 | 0% Низкий | 6 месяцев назад |
 | CVE-2026-7262 In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, when a SOAP server has a typemap configured, the decoding process contains a mistake which checks the wrong variable in case of missing value element. This leads to dereferences a NULL pointer, causing a segmentation fault. This allows a remote unauthenticated attacker to crash the PHP SOAP server process, resulting in denial of service. | CVSS3: 7.5 | 1% Низкий | 6 месяцев назад |
| CVE-2026-7262 In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, when a SOAP server has a typemap configured, the decoding process contains a mistake which checks the wrong variable in case of missing value element. This leads to dereferences a NULL pointer, causing a segmentation fault. This allows a remote unauthenticated attacker to crash the PHP SOAP server process, resulting in denial of service. | CVSS3: 7.5 | 1% Низкий | 6 месяцев назад |
| CVE-2026-7262 In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, when a SOAP server has a typemap configured, the decoding process contains a mistake which checks the wrong variable in case of missing value element. This leads to dereferences a NULL pointer, causing a segmentation fault. This allows a remote unauthenticated attacker to crash the PHP SOAP server process, resulting in denial of service. | CVSS3: 7.5 | 1% Низкий | 6 месяцев назад |
| CVE-2026-7262 NULL pointer dereference in SOAP apache:Map decoder with missing <value> | 1% Низкий | 5 месяцев назад | |
| CVE-2026-7262 In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before ... | CVSS3: 7.5 | 1% Низкий | 6 месяцев назад |
 | ROS-20260901-80-0012 Уязвимость php 8.5 | CVSS3: 5.3 | 1% Низкий | 2 месяца назад |
| ROS-20260901-80-0011 Уязвимость php 8.4 | CVSS3: 5.3 | 1% Низкий | 2 месяца назад |
| ROS-20260901-80-0010 Уязвимость php 8.3 | CVSS3: 5.3 | 1% Низкий | 2 месяца назад |
| ROS-20260901-80-0009 Уязвимость php | CVSS3: 5.3 | 1% Низкий | 2 месяца назад |
| ROS-20260901-73-0009 Уязвимость php 8.4 | CVSS3: 5.3 | 1% Низкий | 2 месяца назад |
| ROS-20260901-73-0008 Уязвимость php 8.3 | CVSS3: 5.3 | 1% Низкий | 2 месяца назад |
| ROS-20260901-73-0007 Уязвимость php | CVSS3: 5.3 | 1% Низкий | 2 месяца назад |
| GHSA-hmxp-6pc4-f3vv NULL pointer dereference in SOAP apache:Map decoder with missing <value> | 1% Низкий | 6 месяцев назад | |
| GHSA-96wq-48vp-hh57 Signed integer overflow in metaphone() | 0% Низкий | 6 месяцев назад | |
 | BDU:2026-15493 Уязвимость интерпретатора языка PHP, связанная с разыменованием нулевого указателя, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 5.3 | 1% Низкий | 6 месяцев назад |
| BDU:2026-01641 Уязвимость функции metaphone() интерпретатора языка программирования PHP, позволяющая нарушителю вызвать ошибку сегментации и вызвать отказ в обслуживании | 0% Низкий | 6 месяцев назад |
Уязвимостей на страницу