Skip to content
OpenAdvisories

Product · PHP Group

PHP

103 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.1
    CVE-2026-17544 Public exploit

    Out-of-bounds write in bccomp() via crafted operand and scale

    Attacker-provided inputs to bccomp() could lead to an out-of-bounds write with stack and heap corruption in PHP versions from 8.4.* before 8.4.24 and from 8.5.* before 8.5.9.

    PHP Group PHP php8.4 php85 Debian Ubuntu Alpine
  • High 8.1
    CVE-2026-17543 Public exploit

    SQL injection in ext-pgsql via E'...' backslash breakout

    Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.24, and from 8.5.* before 8.5.9.

    PHP Group PHP php5 php7.0 Debian Ubuntu Alpine
  • High 7.5
    CVE-2022-31626 Public exploit EPSS 58%

    mysqlnd/pdo password buffer overflow

    In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when pdo_mysql extension with mysqlnd driver, if the third party is allowed to supply host to connect to and the password for the connection, password of excessive length can trigg…

    PHP Group PHP php5 php7.0 Debian Ubuntu Alpine