Skip to content
OpenAdvisories
High USN-5530-1 1 CVE

php8.1 vulnerability

Published Jul 25, 2022 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

It was discovered that PHP incorrectly handled certain memory operations
when obtaining file information. A remote attacker could use this issue to
cause PHP to crash, resulting in a denial of service, or possibly execute
arbitrary code.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 22.04 LTS 22.04:LTS php8.1 8.1.2-1ubuntu2.2

Vulnerabilities 1

  • High 7.7
    CVE-2022-31627

    Heap buffer overflow in finfo_buffer

    In PHP versions 8.1.x below 8.1.8, when fileinfo functions, such as finfo_buffer, due to incorrect patch applied to the third party code from libmagic, incorrect function may be used to free allocated memory, which may lead to heap corruption.

    PHP Group PHP php8.1 Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2022-31627