CVE-2025-14178: php_group php Integer Overflow or Wraparound

CVSS: 8.2v3.1HighModified

AliasesSUSE-SU-2026:0245-1RHSA-2026:4077RHSA-2026:4086+8 more

Published 27-12-2025Last modified 24-01-2026

Vulnerability summary

CVE-2025-14178 is a high (CVSS 8.2) Integer Overflow or Wraparound vulnerability in php_group php. EPSS estimates a 0.46% chance of exploitation in the next 30 days, higher than 38.4% of scored vulnerabilities.

Overall risk

33/100

0100

Medium · default modelHow is this calculated?

CVSS score

8.2/10

010

High · v3.1 (NVD)

EPSS score

0.46%

0%100%

Low · -0.01 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 20 · Related 6

Timeline

27-12-2025
PublishedVulnerability first disclosed.
24-01-2026
Last modifiedVulnerability information updated.

Description

In PHP versions:8.1.* before 8.1.34, 8.2.* before 8.2.30, 8.3.* before 8.3.29, 8.4.* before 8.4.16, 8.5.* before 8.5.1, a heap buffer overflow occurs in array_merge() when the total element count of packed arrays exceeds 32-bit limits or HT_MAX_SIZE, due to an integer overflow in the precomputation of element counts using zend_hash_num_elements(). This may lead to memory corruption or crashes and affect the integrity and availability of the target server.

CVSS metrics

5 scores · 5 sources · 1 version

v3.18.2

EPSS trend

Probability

0.46%

Chance of exploitation in the next 30 days

Percentile

38%

Versus all other CVEs

30-day change

-0.01 pp

From 0.46% on 19-09-2026

19-09-202619-10-2026

EPSS score

0.46%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Redhat75 products

apcu-panel< 0:5.1.18-1.module+el8.3.0+6678+b09f589e
libzip< 0:1.6.1-1.module+el8.3.0+6678+b09f589e
libzip-debuginfo< 0:1.6.1-1.module+el8.3.0+6678+b09f589e
libzip-debugsource< 0:1.6.1-1.module+el8.3.0+6678+b09f589e
libzip-devel< 0:1.6.1-1.module+el8.3.0+6678+b09f589e

libzip-tools< 0:1.6.1-1.module+el8.3.0+6678+b09f589e
libzip-tools-debuginfo< 0:1.6.1-1.module+el8.3.0+6678+b09f589e
php< 0:8.0.30-1.el9_4.1 | < 0:8.0.30-3.el9_6.1 | < 0:8.0.13-2.el9_0.1 | < 0:8.0.30-1.el9_2.1 | < 0:7.4.6-5.module+el8.4.0+24050+df93a449.2 | < 0:7.4.33-1.module+el8.8.0+24048+c1e4778e.1 | < 0:7.4.19-4.module+el8.6.0+24049+97f8f81c.2
php-bcmath< 0:8.0.30-1.el9_4.1 | < 0:8.0.30-3.el9_6.1 | < 0:8.0.13-2.el9_0.1 | < 0:8.0.30-1.el9_2.1 | < 0:7.4.6-5.module+el8.4.0+24050+df93a449.2 | < 0:7.4.33-1.module+el8.8.0+24048+c1e4778e.1 | < 0:7.4.19-4.module+el8.6.0+24049+97f8f81c.2
php-bcmath-debuginfo< 0:8.0.30-1.el9_4.1 | < 0:8.0.30-3.el9_6.1 | < 0:8.0.13-2.el9_0.1 | < 0:8.0.30-1.el9_2.1 | < 0:7.4.6-5.module+el8.4.0+24050+df93a449.2 | < 0:7.4.33-1.module+el8.8.0+24048+c1e4778e.1 | < 0:7.4.19-4.module+el8.6.0+24049+97f8f81c.2
php-cli< 0:8.0.30-1.el9_4.1 | < 0:8.0.30-3.el9_6.1 | < 0:8.0.13-2.el9_0.1 | < 0:8.0.30-1.el9_2.1 | < 0:7.4.6-5.module+el8.4.0+24050+df93a449.2 | < 0:7.4.33-1.module+el8.8.0+24048+c1e4778e.1 | < 0:7.4.19-4.module+el8.6.0+24049+97f8f81c.2
php-cli-debuginfo< 0:8.0.30-1.el9_4.1 | < 0:8.0.30-3.el9_6.1 | < 0:8.0.13-2.el9_0.1 | < 0:8.0.30-1.el9_2.1 | < 0:7.4.6-5.module+el8.4.0+24050+df93a449.2 | < 0:7.4.33-1.module+el8.8.0+24048+c1e4778e.1 | < 0:7.4.19-4.module+el8.6.0+24049+97f8f81c.2
php-common< 0:8.0.30-1.el9_4.1 | < 0:8.0.30-3.el9_6.1 | < 0:8.0.13-2.el9_0.1 | < 0:8.0.30-1.el9_2.1 | < 0:7.4.6-5.module+el8.4.0+24050+df93a449.2 | < 0:7.4.33-1.module+el8.8.0+24048+c1e4778e.1 | < 0:7.4.19-4.module+el8.6.0+24049+97f8f81c.2
php-common-debuginfo< 0:8.0.30-1.el9_4.1 | < 0:8.0.30-3.el9_6.1 | < 0:8.0.13-2.el9_0.1 | < 0:8.0.30-1.el9_2.1 | < 0:7.4.6-5.module+el8.4.0+24050+df93a449.2 | < 0:7.4.33-1.module+el8.8.0+24048+c1e4778e.1 | < 0:7.4.19-4.module+el8.6.0+24049+97f8f81c.2
php-dba< 0:8.0.30-1.el9_4.1 | < 0:8.0.30-3.el9_6.1 | < 0:8.0.13-2.el9_0.1 | < 0:8.0.30-1.el9_2.1 | < 0:7.4.6-5.module+el8.4.0+24050+df93a449.2 | < 0:7.4.33-1.module+el8.8.0+24048+c1e4778e.1 | < 0:7.4.19-4.module+el8.6.0+24049+97f8f81c.2
php-dba-debuginfo< 0:8.0.30-1.el9_4.1 | < 0:8.0.30-3.el9_6.1 | < 0:8.0.13-2.el9_0.1 | < 0:8.0.30-1.el9_2.1 | < 0:7.4.6-5.module+el8.4.0+24050+df93a449.2 | < 0:7.4.33-1.module+el8.8.0+24048+c1e4778e.1 | < 0:7.4.19-4.module+el8.6.0+24049+97f8f81c.2
php-dbg< 0:8.0.30-1.el9_4.1 | < 0:8.0.30-3.el9_6.1 | < 0:8.0.13-2.el9_0.1 | < 0:8.0.30-1.el9_2.1 | < 0:7.4.6-5.module+el8.4.0+24050+df93a449.2 | < 0:7.4.33-1.module+el8.8.0+24048+c1e4778e.1 | < 0:7.4.19-4.module+el8.6.0+24049+97f8f81c.2
php-dbg-debuginfo< 0:8.0.30-1.el9_4.1 | < 0:8.0.30-3.el9_6.1 | < 0:8.0.13-2.el9_0.1 | < 0:8.0.30-1.el9_2.1 | < 0:7.4.6-5.module+el8.4.0+24050+df93a449.2 | < 0:7.4.33-1.module+el8.8.0+24048+c1e4778e.1 | < 0:7.4.19-4.module+el8.6.0+24049+97f8f81c.2
php-debuginfo< 0:8.0.30-1.el9_4.1 | < 0:8.0.30-3.el9_6.1 | < 0:8.0.13-2.el9_0.1 | < 0:8.0.30-1.el9_2.1 | < 0:7.4.6-5.module+el8.4.0+24050+df93a449.2 | < 0:7.4.33-1.module+el8.8.0+24048+c1e4778e.1 | < 0:7.4.19-4.module+el8.6.0+24049+97f8f81c.2
php-debugsource< 0:8.0.30-1.el9_4.1 | < 0:8.0.30-3.el9_6.1 | < 0:8.0.13-2.el9_0.1 | < 0:8.0.30-1.el9_2.1 | < 0:7.4.6-5.module+el8.4.0+24050+df93a449.2 | < 0:7.4.33-1.module+el8.8.0+24048+c1e4778e.1 | < 0:7.4.19-4.module+el8.6.0+24049+97f8f81c.2
php-devel< 0:8.0.30-1.el9_4.1 | < 0:8.0.30-3.el9_6.1 | < 0:8.0.13-2.el9_0.1 | < 0:8.0.30-1.el9_2.1 | < 0:7.4.6-5.module+el8.4.0+24050+df93a449.2 | < 0:7.4.33-1.module+el8.8.0+24048+c1e4778e.1 | < 0:7.4.19-4.module+el8.6.0+24049+97f8f81c.2
php-embedded< 0:8.0.30-1.el9_4.1 | < 0:8.0.30-3.el9_6.1 | < 0:8.0.13-2.el9_0.1 | < 0:8.0.30-1.el9_2.1 | < 0:7.4.6-5.module+el8.4.0+24050+df93a449.2 | < 0:7.4.33-1.module+el8.8.0+24048+c1e4778e.1 | < 0:7.4.19-4.module+el8.6.0+24049+97f8f81c.2
php-embedded-debuginfo< 0:8.0.30-1.el9_4.1 | < 0:8.0.30-3.el9_6.1 | < 0:8.0.13-2.el9_0.1 | < 0:8.0.30-1.el9_2.1 | < 0:7.4.6-5.module+el8.4.0+24050+df93a449.2 | < 0:7.4.33-1.module+el8.8.0+24048+c1e4778e.1 | < 0:7.4.19-4.module+el8.6.0+24049+97f8f81c.2
php-enchant< 0:8.0.30-1.el9_4.1 | < 0:8.0.30-3.el9_6.1 | < 0:8.0.13-2.el9_0.1 | < 0:8.0.30-1.el9_2.1 | < 0:7.4.6-5.module+el8.4.0+24050+df93a449.2 | < 0:7.4.33-1.module+el8.8.0+24048+c1e4778e.1 | < 0:7.4.19-4.module+el8.6.0+24049+97f8f81c.2
php-enchant-debuginfo< 0:8.0.30-1.el9_4.1 | < 0:8.0.30-3.el9_6.1 | < 0:8.0.13-2.el9_0.1 | < 0:8.0.30-1.el9_2.1 | < 0:7.4.6-5.module+el8.4.0+24050+df93a449.2 | < 0:7.4.33-1.module+el8.8.0+24048+c1e4778e.1 | < 0:7.4.19-4.module+el8.6.0+24049+97f8f81c.2
php-ffi< 0:8.0.30-1.el9_4.1 | < 0:8.0.30-3.el9_6.1 | < 0:8.0.13-2.el9_0.1 | < 0:8.0.30-1.el9_2.1 | < 0:7.4.6-5.module+el8.4.0+24050+df93a449.2 | < 0:7.4.33-1.module+el8.8.0+24048+c1e4778e.1 | < 0:7.4.19-4.module+el8.6.0+24049+97f8f81c.2
php-ffi-debuginfo< 0:8.0.30-1.el9_4.1 | < 0:8.0.30-3.el9_6.1 | < 0:8.0.13-2.el9_0.1 | < 0:8.0.30-1.el9_2.1 | < 0:7.4.6-5.module+el8.4.0+24050+df93a449.2 | < 0:7.4.33-1.module+el8.8.0+24048+c1e4778e.1 | < 0:7.4.19-4.module+el8.6.0+24049+97f8f81c.2
php-fpm< 0:8.0.30-1.el9_4.1 | < 0:8.0.30-3.el9_6.1 | < 0:8.0.13-2.el9_0.1 | < 0:8.0.30-1.el9_2.1 | < 0:7.4.6-5.module+el8.4.0+24050+df93a449.2 | < 0:7.4.33-1.module+el8.8.0+24048+c1e4778e.1 | < 0:7.4.19-4.module+el8.6.0+24049+97f8f81c.2
php-fpm-debuginfo< 0:8.0.30-1.el9_4.1 | < 0:8.0.30-3.el9_6.1 | < 0:8.0.13-2.el9_0.1 | < 0:8.0.30-1.el9_2.1 | < 0:7.4.6-5.module+el8.4.0+24050+df93a449.2 | < 0:7.4.33-1.module+el8.8.0+24048+c1e4778e.1 | < 0:7.4.19-4.module+el8.6.0+24049+97f8f81c.2
php-gd< 0:8.0.30-1.el9_4.1 | < 0:8.0.30-3.el9_6.1 | < 0:8.0.13-2.el9_0.1 | < 0:8.0.30-1.el9_2.1 | < 0:7.4.6-5.module+el8.4.0+24050+df93a449.2 | < 0:7.4.33-1.module+el8.8.0+24048+c1e4778e.1 | < 0:7.4.19-4.module+el8.6.0+24049+97f8f81c.2
php-gd-debuginfo< 0:8.0.30-1.el9_4.1 | < 0:8.0.30-3.el9_6.1 | < 0:8.0.13-2.el9_0.1 | < 0:8.0.30-1.el9_2.1 | < 0:7.4.6-5.module+el8.4.0+24050+df93a449.2 | < 0:7.4.33-1.module+el8.8.0+24048+c1e4778e.1 | < 0:7.4.19-4.module+el8.6.0+24049+97f8f81c.2
php-gmp< 0:8.0.30-1.el9_4.1 | < 0:8.0.30-3.el9_6.1 | < 0:8.0.13-2.el9_0.1 | < 0:8.0.30-1.el9_2.1 | < 0:7.4.6-5.module+el8.4.0+24050+df93a449.2 | < 0:7.4.33-1.module+el8.8.0+24048+c1e4778e.1 | < 0:7.4.19-4.module+el8.6.0+24049+97f8f81c.2
php-gmp-debuginfo< 0:8.0.30-1.el9_4.1 | < 0:8.0.30-3.el9_6.1 | < 0:8.0.13-2.el9_0.1 | < 0:8.0.30-1.el9_2.1 | < 0:7.4.6-5.module+el8.4.0+24050+df93a449.2 | < 0:7.4.33-1.module+el8.8.0+24048+c1e4778e.1 | < 0:7.4.19-4.module+el8.6.0+24049+97f8f81c.2
php-intl< 0:8.0.30-1.el9_4.1 | < 0:8.0.30-3.el9_6.1 | < 0:8.0.13-2.el9_0.1 | < 0:8.0.30-1.el9_2.1 | < 0:7.4.6-5.module+el8.4.0+24050+df93a449.2 | < 0:7.4.33-1.module+el8.8.0+24048+c1e4778e.1 | < 0:7.4.19-4.module+el8.6.0+24049+97f8f81c.2
php-intl-debuginfo< 0:8.0.30-1.el9_4.1 | < 0:8.0.30-3.el9_6.1 | < 0:8.0.13-2.el9_0.1 | < 0:8.0.30-1.el9_2.1 | < 0:7.4.6-5.module+el8.4.0+24050+df93a449.2 | < 0:7.4.33-1.module+el8.8.0+24048+c1e4778e.1 | < 0:7.4.19-4.module+el8.6.0+24049+97f8f81c.2
php-json< 0:7.4.6-5.module+el8.4.0+24050+df93a449.2 | < 0:7.4.33-1.module+el8.8.0+24048+c1e4778e.1 | < 0:7.4.19-4.module+el8.6.0+24049+97f8f81c.2
php-json-debuginfo< 0:7.4.6-5.module+el8.4.0+24050+df93a449.2 | < 0:7.4.33-1.module+el8.8.0+24048+c1e4778e.1 | < 0:7.4.19-4.module+el8.6.0+24049+97f8f81c.2
php-ldap< 0:8.0.30-1.el9_4.1 | < 0:8.0.30-3.el9_6.1 | < 0:8.0.13-2.el9_0.1 | < 0:8.0.30-1.el9_2.1 | < 0:7.4.6-5.module+el8.4.0+24050+df93a449.2 | < 0:7.4.33-1.module+el8.8.0+24048+c1e4778e.1 | < 0:7.4.19-4.module+el8.6.0+24049+97f8f81c.2
php-ldap-debuginfo< 0:8.0.30-1.el9_4.1 | < 0:8.0.30-3.el9_6.1 | < 0:8.0.13-2.el9_0.1 | < 0:8.0.30-1.el9_2.1 | < 0:7.4.6-5.module+el8.4.0+24050+df93a449.2 | < 0:7.4.33-1.module+el8.8.0+24048+c1e4778e.1 | < 0:7.4.19-4.module+el8.6.0+24049+97f8f81c.2
php-mbstring< 0:8.0.30-1.el9_4.1 | < 0:8.0.30-3.el9_6.1 | < 0:8.0.13-2.el9_0.1 | < 0:8.0.30-1.el9_2.1 | < 0:7.4.6-5.module+el8.4.0+24050+df93a449.2 | < 0:7.4.33-1.module+el8.8.0+24048+c1e4778e.1 | < 0:7.4.19-4.module+el8.6.0+24049+97f8f81c.2
php-mbstring-debuginfo< 0:8.0.30-1.el9_4.1 | < 0:8.0.30-3.el9_6.1 | < 0:8.0.13-2.el9_0.1 | < 0:8.0.30-1.el9_2.1 | < 0:7.4.6-5.module+el8.4.0+24050+df93a449.2 | < 0:7.4.33-1.module+el8.8.0+24048+c1e4778e.1 | < 0:7.4.19-4.module+el8.6.0+24049+97f8f81c.2
php-mysqlnd< 0:8.0.30-1.el9_4.1 | < 0:8.0.30-3.el9_6.1 | < 0:8.0.13-2.el9_0.1 | < 0:8.0.30-1.el9_2.1 | < 0:7.4.6-5.module+el8.4.0+24050+df93a449.2 | < 0:7.4.33-1.module+el8.8.0+24048+c1e4778e.1 | < 0:7.4.19-4.module+el8.6.0+24049+97f8f81c.2
php-mysqlnd-debuginfo< 0:8.0.30-1.el9_4.1 | < 0:8.0.30-3.el9_6.1 | < 0:8.0.13-2.el9_0.1 | < 0:8.0.30-1.el9_2.1 | < 0:7.4.6-5.module+el8.4.0+24050+df93a449.2 | < 0:7.4.33-1.module+el8.8.0+24048+c1e4778e.1 | < 0:7.4.19-4.module+el8.6.0+24049+97f8f81c.2
php-odbc< 0:8.0.30-1.el9_4.1 | < 0:8.0.30-3.el9_6.1 | < 0:8.0.13-2.el9_0.1 | < 0:8.0.30-1.el9_2.1 | < 0:7.4.6-5.module+el8.4.0+24050+df93a449.2 | < 0:7.4.33-1.module+el8.8.0+24048+c1e4778e.1 | < 0:7.4.19-4.module+el8.6.0+24049+97f8f81c.2
php-odbc-debuginfo< 0:8.0.30-1.el9_4.1 | < 0:8.0.30-3.el9_6.1 | < 0:8.0.13-2.el9_0.1 | < 0:8.0.30-1.el9_2.1 | < 0:7.4.6-5.module+el8.4.0+24050+df93a449.2 | < 0:7.4.33-1.module+el8.8.0+24048+c1e4778e.1 | < 0:7.4.19-4.module+el8.6.0+24049+97f8f81c.2
php-opcache< 0:8.0.30-1.el9_4.1 | < 0:8.0.30-3.el9_6.1 | < 0:8.0.13-2.el9_0.1 | < 0:8.0.30-1.el9_2.1 | < 0:7.4.6-5.module+el8.4.0+24050+df93a449.2 | < 0:7.4.33-1.module+el8.8.0+24048+c1e4778e.1 | < 0:7.4.19-4.module+el8.6.0+24049+97f8f81c.2
php-opcache-debuginfo< 0:8.0.30-1.el9_4.1 | < 0:8.0.30-3.el9_6.1 | < 0:8.0.13-2.el9_0.1 | < 0:8.0.30-1.el9_2.1 | < 0:7.4.6-5.module+el8.4.0+24050+df93a449.2 | < 0:7.4.33-1.module+el8.8.0+24048+c1e4778e.1 | < 0:7.4.19-4.module+el8.6.0+24049+97f8f81c.2
php-pdo< 0:8.0.30-1.el9_4.1 | < 0:8.0.30-3.el9_6.1 | < 0:8.0.13-2.el9_0.1 | < 0:8.0.30-1.el9_2.1 | < 0:7.4.6-5.module+el8.4.0+24050+df93a449.2 | < 0:7.4.33-1.module+el8.8.0+24048+c1e4778e.1 | < 0:7.4.19-4.module+el8.6.0+24049+97f8f81c.2
php-pdo-debuginfo< 0:8.0.30-1.el9_4.1 | < 0:8.0.30-3.el9_6.1 | < 0:8.0.13-2.el9_0.1 | < 0:8.0.30-1.el9_2.1 | < 0:7.4.6-5.module+el8.4.0+24050+df93a449.2 | < 0:7.4.33-1.module+el8.8.0+24048+c1e4778e.1 | < 0:7.4.19-4.module+el8.6.0+24049+97f8f81c.2
php-pear< 1:1.10.13-1.module+el8.4.0+16578+ed65e99e | < 1:1.10.13-1.module+el8.7.0+15127+a450a8db | < 1:1.10.13-1.module+el8.6.0+16577+0788886f
php-pecl-apcu< 0:5.1.18-1.module+el8.3.0+6678+b09f589e
php-pecl-apcu-debuginfo< 0:5.1.18-1.module+el8.3.0+6678+b09f589e
php-pecl-apcu-debugsource< 0:5.1.18-1.module+el8.3.0+6678+b09f589e
php-pecl-apcu-devel< 0:5.1.18-1.module+el8.3.0+6678+b09f589e
php-pecl-rrd< 0:2.0.1-1.module+el8.3.0+6678+b09f589e
php-pecl-rrd-debuginfo< 0:2.0.1-1.module+el8.3.0+6678+b09f589e
php-pecl-rrd-debugsource< 0:2.0.1-1.module+el8.3.0+6678+b09f589e
php-pecl-xdebug< 0:2.9.5-1.module+el8.3.0+6678+b09f589e
php-pecl-xdebug-debuginfo< 0:2.9.5-1.module+el8.3.0+6678+b09f589e
php-pecl-xdebug-debugsource< 0:2.9.5-1.module+el8.3.0+6678+b09f589e
php-pecl-zip< 0:1.18.2-1.module+el8.3.0+6678+b09f589e
php-pecl-zip-debuginfo< 0:1.18.2-1.module+el8.3.0+6678+b09f589e
php-pecl-zip-debugsource< 0:1.18.2-1.module+el8.3.0+6678+b09f589e
php-pgsql< 0:8.0.30-1.el9_4.1 | < 0:8.0.30-3.el9_6.1 | < 0:8.0.13-2.el9_0.1 | < 0:8.0.30-1.el9_2.1 | < 0:7.4.6-5.module+el8.4.0+24050+df93a449.2 | < 0:7.4.33-1.module+el8.8.0+24048+c1e4778e.1 | < 0:7.4.19-4.module+el8.6.0+24049+97f8f81c.2
php-pgsql-debuginfo< 0:8.0.30-1.el9_4.1 | < 0:8.0.30-3.el9_6.1 | < 0:8.0.13-2.el9_0.1 | < 0:8.0.30-1.el9_2.1 | < 0:7.4.6-5.module+el8.4.0+24050+df93a449.2 | < 0:7.4.33-1.module+el8.8.0+24048+c1e4778e.1 | < 0:7.4.19-4.module+el8.6.0+24049+97f8f81c.2
php-process< 0:8.0.30-1.el9_4.1 | < 0:8.0.30-3.el9_6.1 | < 0:8.0.13-2.el9_0.1 | < 0:8.0.30-1.el9_2.1 | < 0:7.4.6-5.module+el8.4.0+24050+df93a449.2 | < 0:7.4.33-1.module+el8.8.0+24048+c1e4778e.1 | < 0:7.4.19-4.module+el8.6.0+24049+97f8f81c.2
php-process-debuginfo< 0:8.0.30-1.el9_4.1 | < 0:8.0.30-3.el9_6.1 | < 0:8.0.13-2.el9_0.1 | < 0:8.0.30-1.el9_2.1 | < 0:7.4.6-5.module+el8.4.0+24050+df93a449.2 | < 0:7.4.33-1.module+el8.8.0+24048+c1e4778e.1 | < 0:7.4.19-4.module+el8.6.0+24049+97f8f81c.2
php-snmp< 0:8.0.30-1.el9_4.1 | < 0:8.0.30-3.el9_6.1 | < 0:8.0.13-2.el9_0.1 | < 0:8.0.30-1.el9_2.1 | < 0:7.4.6-5.module+el8.4.0+24050+df93a449.2 | < 0:7.4.33-1.module+el8.8.0+24048+c1e4778e.1 | < 0:7.4.19-4.module+el8.6.0+24049+97f8f81c.2
php-snmp-debuginfo< 0:8.0.30-1.el9_4.1 | < 0:8.0.30-3.el9_6.1 | < 0:8.0.13-2.el9_0.1 | < 0:8.0.30-1.el9_2.1 | < 0:7.4.6-5.module+el8.4.0+24050+df93a449.2 | < 0:7.4.33-1.module+el8.8.0+24048+c1e4778e.1 | < 0:7.4.19-4.module+el8.6.0+24049+97f8f81c.2
php-soap< 0:8.0.30-1.el9_4.1 | < 0:8.0.30-3.el9_6.1 | < 0:8.0.13-2.el9_0.1 | < 0:8.0.30-1.el9_2.1 | < 0:7.4.6-5.module+el8.4.0+24050+df93a449.2 | < 0:7.4.33-1.module+el8.8.0+24048+c1e4778e.1 | < 0:7.4.19-4.module+el8.6.0+24049+97f8f81c.2
php-soap-debuginfo< 0:8.0.30-1.el9_4.1 | < 0:8.0.30-3.el9_6.1 | < 0:8.0.13-2.el9_0.1 | < 0:8.0.30-1.el9_2.1 | < 0:7.4.6-5.module+el8.4.0+24050+df93a449.2 | < 0:7.4.33-1.module+el8.8.0+24048+c1e4778e.1 | < 0:7.4.19-4.module+el8.6.0+24049+97f8f81c.2
php-xml< 0:8.0.30-1.el9_4.1 | < 0:8.0.30-3.el9_6.1 | < 0:8.0.13-2.el9_0.1 | < 0:8.0.30-1.el9_2.1 | < 0:7.4.6-5.module+el8.4.0+24050+df93a449.2 | < 0:7.4.33-1.module+el8.8.0+24048+c1e4778e.1 | < 0:7.4.19-4.module+el8.6.0+24049+97f8f81c.2
php-xml-debuginfo< 0:8.0.30-1.el9_4.1 | < 0:8.0.30-3.el9_6.1 | < 0:8.0.13-2.el9_0.1 | < 0:8.0.30-1.el9_2.1 | < 0:7.4.6-5.module+el8.4.0+24050+df93a449.2 | < 0:7.4.33-1.module+el8.8.0+24048+c1e4778e.1 | < 0:7.4.19-4.module+el8.6.0+24049+97f8f81c.2
php-xmlrpc< 0:7.4.6-5.module+el8.4.0+24050+df93a449.2 | < 0:7.4.33-1.module+el8.8.0+24048+c1e4778e.1 | < 0:7.4.19-4.module+el8.6.0+24049+97f8f81c.2
php-xmlrpc-debuginfo< 0:7.4.6-5.module+el8.4.0+24050+df93a449.2 | < 0:7.4.33-1.module+el8.8.0+24048+c1e4778e.1 | < 0:7.4.19-4.module+el8.6.0+24049+97f8f81c.2

Show all 75

Suse40 products

apache2-mod_php7&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS< 7.4.33-150400.4.55.1
apache2-mod_php7&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS< 7.4.33-150400.4.55.1
apache2-mod_php7&distro=SUSE Linux Enterprise Module for Legacy 15 SP7< 7.4.33-150400.4.55.1
apache2-mod_php7&distro=SUSE Linux Enterprise Module for Package Hub 15 SP7< 7.4.33-150400.4.55.1
apache2-mod_php7&distro=SUSE Linux Enterprise Server 15 SP4-LTSS< 7.4.33-150400.4.55.1

apache2-mod_php7&distro=SUSE Linux Enterprise Server 15 SP5-LTSS< 7.4.33-150400.4.55.1
apache2-mod_php7&distro=SUSE Linux Enterprise Server 15 SP6-LTSS< 7.4.33-150400.4.55.1
apache2-mod_php7&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP4< 7.4.33-150400.4.55.1
apache2-mod_php7&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP5< 7.4.33-150400.4.55.1
apache2-mod_php7&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP6< 7.4.33-150400.4.55.1
php7-embed&distro=SUSE Linux Enterprise Module for Package Hub 15 SP7< 7.4.33-150400.4.55.1
php7-fastcgi&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS< 7.4.33-150400.4.55.1
php7-fastcgi&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS< 7.4.33-150400.4.55.1
php7-fastcgi&distro=SUSE Linux Enterprise Module for Package Hub 15 SP7< 7.4.33-150400.4.55.1
php7-fastcgi&distro=SUSE Linux Enterprise Server 15 SP4-LTSS< 7.4.33-150400.4.55.1
php7-fastcgi&distro=SUSE Linux Enterprise Server 15 SP5-LTSS< 7.4.33-150400.4.55.1
php7-fastcgi&distro=SUSE Linux Enterprise Server 15 SP6-LTSS< 7.4.33-150400.4.55.1
php7-fastcgi&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP4< 7.4.33-150400.4.55.1
php7-fastcgi&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP5< 7.4.33-150400.4.55.1
php7-fastcgi&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP6< 7.4.33-150400.4.55.1
php7-fpm&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS< 7.4.33-150400.4.55.1
php7-fpm&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS< 7.4.33-150400.4.55.1
php7-fpm&distro=SUSE Linux Enterprise Module for Package Hub 15 SP7< 7.4.33-150400.4.55.1
php7-fpm&distro=SUSE Linux Enterprise Server 15 SP4-LTSS< 7.4.33-150400.4.55.1
php7-fpm&distro=SUSE Linux Enterprise Server 15 SP5-LTSS< 7.4.33-150400.4.55.1
php7-fpm&distro=SUSE Linux Enterprise Server 15 SP6-LTSS< 7.4.33-150400.4.55.1
php7-fpm&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP4< 7.4.33-150400.4.55.1
php7-fpm&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP5< 7.4.33-150400.4.55.1
php7-fpm&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP6< 7.4.33-150400.4.55.1
php7-test&distro=SUSE Linux Enterprise Module for Package Hub 15 SP7< 7.4.33-150400.4.55.1
php7&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS< 7.4.33-150400.4.55.1
php7&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS< 7.4.33-150400.4.55.1
php7&distro=SUSE Linux Enterprise Module for Legacy 15 SP7< 7.4.33-150400.4.55.1
php7&distro=SUSE Linux Enterprise Module for Package Hub 15 SP7< 7.4.33-150400.4.55.1
php7&distro=SUSE Linux Enterprise Server 15 SP4-LTSS< 7.4.33-150400.4.55.1
php7&distro=SUSE Linux Enterprise Server 15 SP5-LTSS< 7.4.33-150400.4.55.1
php7&distro=SUSE Linux Enterprise Server 15 SP6-LTSS< 7.4.33-150400.4.55.1
php7&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP4< 7.4.33-150400.4.55.1
php7&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP5< 7.4.33-150400.4.55.1
php7&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP6< 7.4.33-150400.4.55.1

Show all 40

Opensuse6 products

apache2-mod_php7&distro=openSUSE Leap 15.6< 7.4.33-150400.4.55.1
php7-embed&distro=openSUSE Leap 15.6< 7.4.33-150400.4.55.1
php7-fastcgi&distro=openSUSE Leap 15.6< 7.4.33-150400.4.55.1
php7-fpm&distro=openSUSE Leap 15.6< 7.4.33-150400.4.55.1
php7-test&distro=openSUSE Leap 15.6< 7.4.33-150400.4.55.1

Show all 6

Ubuntu5 products

php7.2< 7.2.24-0ubuntu0.18.04.17+esm12
php7.4< 7.4.3-4ubuntu2.29+esm3
php8.1< 8.1.2-1ubuntu2.23
php8.3< 8.3.6-0ubuntu0.24.04.6
php8.4< 8.4.11-1ubuntu1.1

Debian3 products

php7.4< 7.4.33-1+deb11u10
php8.2< 8.2.30-1~deb12u1
php8.4< 8.4.16-1~deb13u1 | < 8.4.16-1

Php1 product

php≥ 8.1.0, < 8.1.34 | ≥ 8.2.0, < 8.2.30 | ≥ 8.3.0, < 8.3.29 | ≥ 8.4.0, < 8.4.16 | ≥ 8.5.0, < 8.5.1

Php_group1 product

php≥ 8.1.*, < 8.1.34 | ≥ 8.2.*, < 8.2.30 | ≥ 8.3.*, < 8.3.29 | ≥ 8.4.*, < 8.4.16 | ≥ 8.5.*, < 8.5.1

7 vendors · 131 products

References

28 links

github.com/php/php-src/security/advisories/GHSA-h96m-rvf9-jgm2ARTICLEREPORTVendor Advisory
lists.debian.org/debian-lts-announce/2026/01/msg00019.html
www.suse.com/support/update/announcement/2026/suse-su-20260245-1/Advisory
bugzilla.suse.com/1255711REPORT
www.suse.com/security/cve/CVE-2025-14178WEB
access.redhat.com/errata/RHSA-2026:4077Advisory
access.redhat.com/security/updates/classification/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=2425625REPORT
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_4077.jsonAdvisory
access.redhat.com/security/cve/CVE-2025-14178REPORT

Show all 28 references

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities