php.bugs archive
1717 archived articles, newest first (page 3 of 18). Latest articles →
[php-src] Issue #22787: Typo in CVE-2023-0567
Mon, 20 Jul 2026 07:16:37 +0000[php-src] Issue #22818: assertion failure at user_filter_factory_create
Mon, 20 Jul 2026 07:11:54 +0000[php-src] Issue #22817: The array_keys function casts the keys
Mon, 20 Jul 2026 04:49:09 +0000[php-src] Issue #16502: Overflow in pow()
Sun, 19 Jul 2026 14:39:15 +0000[php-src] Issue #22787: Typo in CVE-2023-0567
Fri, 17 Jul 2026 14:11:19 +0000[php-src] Issue #22782: Const expr FCC crashes under preloading
Fri, 17 Jul 2026 12:01:37 +0000[php-src] Issue #22779: mb_strrpos() returns the wrong position for a negative offset in a non-UTF-8 encoding
Fri, 17 Jul 2026 01:22:37 +0000[php-src] Issue #22777: Deprecate JIT now
Thu, 16 Jul 2026 23:56:34 +0000[php-src] Issue #22775: foreach by reference silently loses writes when the array expression has an inline (array) cast
Thu, 16 Jul 2026 19:45:54 +0000[php-src] Issue #22763: JIT fails to clear ZREG_TYPE_ONLY after setting reg
Thu, 16 Jul 2026 13:47:52 +0000[php-src] Issue #21738: UB in php_url_decode_ex
Thu, 16 Jul 2026 13:00:40 +0000[php-src] Issue #22759: Io\Poll use-after-free
Thu, 16 Jul 2026 10:41:42 +0000[php-src] Issue #22758: phpsessionclean not using settings in {conf_dir}/conf.d/ directory
Thu, 16 Jul 2026 10:39:04 +0000[php-src] Issue #21691: PHP 8.6 OPcache: DO_UCALL breaks reference returns (segfault / invalid opcode)
Wed, 15 Jul 2026 22:54:18 +0000[php-src] Issue #22752: Build failure with libxml 2.15
Wed, 15 Jul 2026 19:04:18 +0000[php-src] Issue #22738: Enums inside classes
Wed, 15 Jul 2026 07:27:19 +0000[php-src] Issue #22695: Nullable Casts
Wed, 15 Jul 2026 06:53:43 +0000[php-src] Issue #22665: Out-of-bounds write in `ext/pdo_odbc` (`pdo_odbc_error()`) when the ODBC driver reports a diagnostic message length beyond the fixed `last_err_msg` buffer
Tue, 14 Jul 2026 20:22:28 +0000[php-src] Issue #22666: Heap buffer overflow (out-of-bounds write) in `ext/pdo_odbc` when an `INPUT_OUTPUT` / output bound parameter is given a runtime value longer than the declared `maxlen`
Tue, 14 Jul 2026 20:12:28 +0000[php-src] Issue #22668: Heap buffer over-read (heap memory disclosure) in `ext/odbc` when fetching a result column whose value is longer than its described display size (`odbc_fetch_array()` / `odbc_fetch_object()` / `odbc_fetch_into()` / `odbc_result()`)
Tue, 14 Jul 2026 19:33:46 +0000[php-src] Issue #22617: Persistent abstract unix domain sockets resolved to wrong resource
Tue, 14 Jul 2026 19:16:48 +0000[php-src] Issue #22480: [phpdbg] Multiple Use-After-Free bugs in watchpoint management due to ignored return values
Tue, 14 Jul 2026 18:23:38 +0000[php-src] Issue #22667: Heap buffer over-read (heap memory disclosure) in `ext/pdo_odbc` when fetching a result column whose value is longer than its described display size (`PDOStatement::fetch()` and related fetch methods)
Tue, 14 Jul 2026 18:10:03 +0000[php-src] Issue #22681: Reflection*::__toString() truncates on null bytes
Tue, 14 Jul 2026 13:42:11 +0000[php-src] Issue #22727: `RETURN` opcode for `return <multi-line conditional expression>;` is attributed to a line inside a never-executed branch, causing false-positive code coverage
Tue, 14 Jul 2026 12:04:19 +0000[php-src] Issue #22727: `RETURN` opcode for `return <multi-line conditional expression>;` is attributed to a line inside a never-executed branch, causing false-positive code coverage
Tue, 14 Jul 2026 11:54:09 +0000[php-src] Issue #22725: dtrace probes exception__caught , exception__thrown useless without more probe arguments for context
Tue, 14 Jul 2026 09:44:33 +0000[php-src] Issue #22720: fetchAll(PDO::FETCH_KEY_PAIR) returning only the last row when data contains non-unique values
Tue, 14 Jul 2026 03:24:45 +0000[php-src] Issue #22720: fetchAll(PDO::FETCH_KEY_PAIR) returning only the last row when data contains non-unique values
Tue, 14 Jul 2026 03:13:20 +0000[php-src] Issue #22497: Add PDO::SQLITE_ATTR_DQS to disable SQLite Double-Quoted String literals configuration
Tue, 14 Jul 2026 00:22:17 +0000[php-src] Issue #22683: Reflection(Class)Constant::__toString() should not warn on NAN conversions
Mon, 13 Jul 2026 14:30:12 +0000[php-src] Issue #22514: Incorrect error column in PHP 8.6 JSON parser
Mon, 13 Jul 2026 10:59:44 +0000[php-src] Issue #22536: Compilation error for php-8.5
Mon, 13 Jul 2026 08:23:18 +0000[php-src] Issue #22678: # Use-after-free in array_multisort() — SORT_STRING comparator frees the array being sorted (ext/standard/array.c)
Mon, 13 Jul 2026 00:45:47 +0000[php-src] Issue #22554: Use-After-Free in DOMXPath custom-function path
Sun, 12 Jul 2026 21:41:12 +0000[php-src] Issue #22527: Unterminated JSON strings are misleadingly reported as “Control character error”
Sun, 12 Jul 2026 19:05:12 +0000[php-src] Issue #22628: ext/uri: Percent-encoding of caret in WHATWG URL paths is not performed
Sun, 12 Jul 2026 18:53:15 +0000[php-src] Issue #22629: ext/uri: WHATWG Validation error incorrect with empty host and non-empty userinfo
Sun, 12 Jul 2026 17:56:57 +0000[php-src] Issue #21720: Segmentation fault (EXC_BAD_ACCESS) when running make test on PHP 8.6-dev (macOS ARM64)
Sun, 12 Jul 2026 16:18:49 +0000[php-src] Issue #22702: Allow constructing a public-only RSA key with openssl_pkey_new()
Sun, 12 Jul 2026 05:29:07 +0000[php-src] Issue #22695: Nullable Casts
Sat, 11 Jul 2026 11:46:41 +0000[php-src] Issue #22693: While linking gcc warns about a possible segfault
Sat, 11 Jul 2026 10:25:28 +0000[php-src] Issue #22684: Reflection(Class)Constant::__toString() should print booleans as booleans
Fri, 10 Jul 2026 19:42:58 +0000[php-src] Issue #22621: UAF via XSLTProcessor::registerPHPFunctions()
Fri, 10 Jul 2026 19:42:19 +0000[php-src] Issue #22671: Assertion failure zend_throw_unwind_exit
Fri, 10 Jul 2026 19:33:48 +0000[php-src] Issue #22683: Reflection(Class)Constant::__toString() should not warn on NAN conversions
Fri, 10 Jul 2026 19:32:32 +0000[php-src] Issue #22681: Reflection*::__toString() truncates on null bytes
Fri, 10 Jul 2026 19:31:16 +0000[php-src] Issue #22658: `ReflectionConstant::__toString()` with a string value with null bytes truncates output
Fri, 10 Jul 2026 18:12:50 +0000[php-src] Issue #11942: Constructors of intl extension formatter classes don't canonicalise locale strings
Fri, 10 Jul 2026 18:05:10 +0000[php-src] Issue #20255: Add a predefined calendar constant in IntlDateFormatter for the proleptic gregorian calendar
Fri, 10 Jul 2026 18:04:06 +0000[php-src] Issue #22678: # Use-after-free in array_multisort() — SORT_STRING comparator frees the array being sorted (ext/standard/array.c)
Fri, 10 Jul 2026 15:59:14 +0000[php-src] Issue #22664: Buffer overflow (out-of-bounds write) in `ext/pdo_dblib` `PDO::lastInsertId()` when `@@IDENTITY` is a wide numeric value (e.g. `numeric(38,0)`) longer than the fixed 32-byte conversion buffer
Fri, 10 Jul 2026 14:29:32 +0000[php-src] Issue #22671: Assertion failure zend_throw_unwind_exit
Fri, 10 Jul 2026 12:41:37 +0000[php-src] Issue #11310: __debugInfo() does nothing on classes extending DateTime
Fri, 10 Jul 2026 12:40:00 +0000[php-src] Issue #13273: `idate()` doesn't work for year `-1`
Fri, 10 Jul 2026 12:37:14 +0000[php-src] Issue #22663: Out-of-bounds read / crash in `ext/mysqlnd` when parsing result-set field metadata whose length-encoded string fields advance the parser pointer past the packet (`php_mysqlnd_rset_field_read`)
Fri, 10 Jul 2026 11:57:34 +0000[php-src] Issue #22669: Heap buffer overflow in bundled dba "flatfile" handler: negative record-length field in the database file is parsed with atoi() into size_t, wrapping the allocation size and overflowing the heap with attacker-controlled file bytes
Fri, 10 Jul 2026 11:57:07 +0000[php-src] Issue #22649: SEGV zim_ZipArchive_setCommentIndex
Fri, 10 Jul 2026 09:02:28 +0000[php-src] Issue #22669: Heap buffer overflow in bundled dba "flatfile" handler: negative record-length field in the database file is parsed with atoi() into size_t, wrapping the allocation size and overflowing the heap with attacker-controlled file bytes
Fri, 10 Jul 2026 07:53:15 +0000[php-src] Issue #22668: Heap buffer over-read (heap memory disclosure) in `ext/odbc` when fetching a result column whose value is longer than its described display size (`odbc_fetch_array()` / `odbc_fetch_object()` / `odbc_fetch_into()` / `odbc_result()`)
Fri, 10 Jul 2026 07:52:34 +0000[php-src] Issue #22667: Heap buffer over-read (heap memory disclosure) in `ext/pdo_odbc` when fetching a result column whose value is longer than its described display size (`PDOStatement::fetch()` and related fetch methods)
Fri, 10 Jul 2026 07:49:40 +0000[php-src] Issue #22666: Heap buffer overflow (out-of-bounds write) in `ext/pdo_odbc` when an `INPUT_OUTPUT` / output bound parameter is given a runtime value longer than the declared `maxlen`
Fri, 10 Jul 2026 07:49:02 +0000[php-src] Issue #22665: Out-of-bounds write in `ext/pdo_odbc` (`pdo_odbc_error()`) when the ODBC driver reports a diagnostic message length beyond the fixed `last_err_msg` buffer
Fri, 10 Jul 2026 07:48:00 +0000[php-src] Issue #22664: Buffer overflow (out-of-bounds write) in `ext/pdo_dblib` `PDO::lastInsertId()` when `@@IDENTITY` is a wide numeric value (e.g. `numeric(38,0)`) longer than the fixed 32-byte conversion buffer
Fri, 10 Jul 2026 07:47:05 +0000[php-src] Issue #22663: Out-of-bounds read / crash in `ext/mysqlnd` when parsing result-set field metadata whose length-encoded string fields advance the parser pointer past the packet (`php_mysqlnd_rset_field_read`)
Fri, 10 Jul 2026 07:42:12 +0000[php-src] Issue #22658: `ReflectionConstant::__toString()` with a string value with null bytes truncates output
Thu, 9 Jul 2026 18:33:12 +0000[php-src] Issue #15867: Core dumped in Zend/zend_weakrefs.c
Thu, 9 Jul 2026 09:02:50 +0000[php-src] Issue #22650: Assertion failure `zend_weakref_unregister(zend_object *, void *, _Bool): Assertion 'tagged_ptr && "Weakref not registered?"' failed`
Thu, 9 Jul 2026 08:47:42 +0000[php-src] Issue #22649: SEGV zim_ZipArchive_setCommentIndex
Thu, 9 Jul 2026 08:40:14 +0000[php-src] Issue #22644: [8.4+] Misbehavior between old DOMDocument and new Dom\HTMLDocument in XML handling
Thu, 9 Jul 2026 06:19:12 +0000[php-src] Issue #22644: [8.4+] Misbehavior between old DOMDocument and new Dom\HTMLDocument in XML handling
Wed, 8 Jul 2026 17:25:40 +0000[php-src] Issue #11366: Add support for other bit depth for imagecreatefrombmp
Wed, 8 Jul 2026 04:51:33 +0000[php-src] Issue #15636: Support cloning of GDImages
Wed, 8 Jul 2026 04:48:25 +0000[php-src] Issue #8698: No PDOException from PDO MySQL transaction commit during DB rollback because of deadlock
Wed, 8 Jul 2026 00:25:21 +0000[php-src] Issue #15294: `bug74589_utf8.phpt` fails with `Could not open input file: …/source/ext/standard/tests/directory/bug74589_/test.php`
Wed, 8 Jul 2026 00:25:19 +0000[php-src] Issue #22631: mysqli double increments num_active_persistent when using real_connect
Tue, 7 Jul 2026 20:46:13 +0000[php-src] Issue #22629: ext/uri: WHATWG Validation error incorrect with empty host and non-empty userinfo
Tue, 7 Jul 2026 14:52:29 +0000[php-src] Issue #22602: integer overflow gregoriantojd ext/calendar/gregor.c
Tue, 7 Jul 2026 14:40:32 +0000[php-src] Issue #22628: ext/uri: Percent-encoding of caret in WHATWG URL paths is not performed
Tue, 7 Jul 2026 14:18:43 +0000[php-src] Issue #15672: Segmentation fault in Zend/zend_execute_API.c
Tue, 7 Jul 2026 12:13:18 +0000[php-src] Issue #15911: Segmentation fault (stack overflow) in AppendIterator
Tue, 7 Jul 2026 12:13:17 +0000[php-src] Issue #22624: Use-after-free via DOMNameSpaceNode after DOMDocument::xinclude()
Tue, 7 Jul 2026 10:11:15 +0000[php-src] Issue #22624: Use-after-free via DOMNameSpaceNode after DOMDocument::xinclude()
Tue, 7 Jul 2026 10:11:14 +0000[php-src] Issue #22246: Unable to use UNIX socket for PROXY
Tue, 7 Jul 2026 00:30:44 +0000[php-src] Issue #22387: AST pretty-printing drops meaningful parentheses around RHS of `instanceof`
Mon, 6 Jul 2026 20:51:00 +0000[php-src] Issue #22554: Use-After-Free in DOMXPath custom-function path
Mon, 6 Jul 2026 19:52:42 +0000[php-src] Issue #22621: UAF via XSLTProcessor::registerPHPFunctions()
Mon, 6 Jul 2026 19:52:03 +0000[php-src] Issue #22621: UAF via XSLTProcessor::registerPHPFunctions()
Mon, 6 Jul 2026 19:52:03 +0000[php-src] Issue #22553: Broken build with system liburiparser
Mon, 6 Jul 2026 19:26:30 +0000[php-src] Issue #22549: Assertion failure _zendi_try_convert_scalar_to_number
Mon, 6 Jul 2026 19:26:03 +0000[php-src] Issue #21090: The "new" operator should emit TypeErrors on __construct() return values.
Mon, 6 Jul 2026 17:42:37 +0000[php-src] Issue #22618: ext/uri: RFC 3986 IPv6 handling is inconsistent
Mon, 6 Jul 2026 15:57:16 +0000[php-src] Issue #22617: Persistent abstract unix domain sockets resolved to wrong resource
Mon, 6 Jul 2026 13:01:50 +0000[php-src] Issue #22616: Allow extensions to hook into `php_child_init()`
Mon, 6 Jul 2026 11:45:16 +0000[php-src] Issue #22553: Broken build with system liburiparser
Sun, 5 Jul 2026 16:09:20 +0000[php-src] Issue #22608: ext/uri: RFC 3986 initial-double-dot path can yield incorrect normalization
Sun, 5 Jul 2026 15:52:17 +0000[php-src] Issue #22553: Broken build with system liburiparser
Sun, 5 Jul 2026 15:11:11 +0000[php-src] Issue #22608: ext/uri: RFC 3986 initial-double-dot path can yield incorrect normalization
Sun, 5 Jul 2026 14:40:55 +0000[php-src] Issue #22176: Memory leak in ZipArchive when registerCancelCallback is used with a reference-returning function during shutdown
Sun, 5 Jul 2026 11:10:19 +0000[php-src] Issue #22602: integer overflow gregoriantojd ext/calendar/gregor.c
Sun, 5 Jul 2026 06:28:34 +0000
lmpx.com only provides a reader for public news (NNTP) servers. It is not
affiliated with the servers or forums shown here and is not responsible for
the content of articles, which is written by their respective authors.