Skip to content
OpenAdvisories

Package · Wolfi

php-8.2

18 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 2.1
    CVE-2026-7259

    Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init()

    In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, a mismatch between encoding lists in Oniguruma and mbfl leads to  a NULL pointer dereference, resulting in a segmentation fault and denial of service. The v…

    PHP Group PHP php php8.1 Debian Ubuntu Azure Linux Alpine Wolfi
  • Low 2.9
    CVE-2026-7262

    NULL pointer dereference in SOAP apache:Map decoder with missing <value>

    In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, when a SOAP server has a typemap configured, the decoding process contains a mistake which checks the wrong variable in case of missing value element.  This…

    PHP Group PHP php5 php7.0 Debian Ubuntu Azure Linux Alpine Wolfi