1 line
3.9 KiB
JSON
1 line
3.9 KiB
JSON
{"schema_version":"1.9.0","id":"OSV-2021-1199","published":"2021-09-04T00:01:34.068585Z","modified":"2026-10-20T17:38:33.479363925Z","summary":"Heap-use-after-free in i_zval_ptr_dtor","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38001\n\n```\nCrash type: Heap-use-after-free READ 1\nCrash state:\ni_zval_ptr_dtor\nconcat_function\nzend_binary_op\n```\n","affected":[{"package":{"name":"php","ecosystem":"OSS-Fuzz","purl":"pkg:generic/php"},"ranges":[{"type":"GIT","repo":"https://github.com/php/php-src.git","events":[{"introduced":"1902f730ee2bda60552f34c0643e2d7b47e4fb64"},{"fixed":"24ff7eee3f04070d8ab1b31f57d17f0c840185bf"}]}],"versions":["php-8.1.0","php-8.1.2RC1","php-8.1.3","php-8.1.4RC1","php-8.1.7RC1","php-8.2.34","php-8.2.33","php-8.2.32","php-8.2.31","php-8.1.34","php-8.2.30","php-8.1.33","php-8.2.29","php-8.1.32","php-8.2.28","php-8.2.27","php-8.2.27RC1","php-8.2.26","php-8.1.31","php-8.2.26RC1","php-8.2.25","php-8.2.25RC1","php-8.1.30","php-8.2.24","php-8.2.24RC1","php-8.2.23","php-8.2.23RC1","php-8.2.22","php-8.2.22RC1","php-8.2.21","php-8.2.21RC1","php-8.1.29","php-8.2.20","php-8.2.20RC1","php-8.2.19","php-8.2.19RC1","php-8.1.28","php-8.2.18","php-8.2.18RC1","php-8.2.17","php-8.2.17RC2","php-8.2.17RC1","php-8.2.16","php-8.2.16RC1","php-8.2.15","php-8.2.15RC1","php-8.2.14","php-8.1.27","php-8.2.14RC1","php-8.1.27RC1","php-8.1.26","php-8.2.13","php-8.1.26RC1","php-8.2.13RC1","php-8.1.25","php-8.2.12","php-8.1.25RC1","php-8.2.12RC1","php-8.1.24","php-8.2.11","php-8.1.24RC1","php-8.2.11RC1","php-8.1.23","php-8.2.10","php-8.2.10RC1","php-8.1.23RC1","php-8.0.30","php-8.2.9","php-8.1.22","php-8.1.22RC1","php-8.2.9RC1","php-8.1.21","php-8.2.8","php-8.2.8RC1","php-8.1.21RC1","php-8.0.29","php-8.1.20","php-8.2.7","php-8.1.20RC1","php-8.2.7RC1","php-8.1.19","php-8.2.6","php-8.2.6RC1","php-8.1.19RC1","php-8.1.18","php-8.2.5","php-8.1.18RC1","php-8.2.5RC1","php-8.1.17","php-8.2.4","php-8.1.17RC1","php-8.2.4RC1","php-8.1.16","php-8.0.28","php-8.2.3","php-8.1.15","php-8.2.2","php-8.2.2RC1","php-8.1.15RC1","php-8.1.14","php-8.2.1","php-8.0.27","php-8.2.1RC1","php-8.1.14RC1","php-8.2.0","php-8.2.0RC7","php-8.0.26","php-8.1.13","php-8.0.26RC1","php-8.1.13RC1","php-8.2.0RC6","php-8.2.0RC5","php-8.1.12","php-8.0.25","php-8.1.12RC1","php-8.0.25RC1","php-8.2.0RC4","php-8.0.24","php-8.1.11","php-8.2.0RC3","php-8.2.0RC2","php-8.0.24RC1","php-8.1.11RC1","php-8.2.0RC1","php-8.1.10","php-8.0.23","php-8.0.23RC1","php-8.1.10RC1","php-8.2.0beta3","php-8.2.0beta2","php-8.1.9","php-8.0.22","php-8.1.9RC1","php-8.2.0beta1","php-8.0.22RC1","php-8.0.21","php-8.1.8","php-8.2.0alpha3","php-8.1.8RC1","php-8.2.0alpha2","php-8.0.21RC1","php-8.0.20","php-8.1.7","php-8.2.0alpha1","php-8.0.20RC1","php-8.1.6","php-8.0.19","php-8.1.6RC1","php-8.0.19RC1","php-8.0.18","php-8.1.5","php-8.1.5RC1","php-8.0.18RC1","php-8.1.4","php-8.0.17","php-8.0.17RC1","php-8.0.16","php-8.1.3RC1","php-8.0.16RC1","php-8.1.2","php-8.0.15","php-8.0.15RC1","php-8.0.14","php-8.1.1","php-8.1.1RC1","php-8.0.14RC1","php-8.0.13","php-8.1.0RC6","php-8.0.13RC1","php-8.1.0RC5","php-8.0.12","php-8.1.0RC4","php-8.0.12RC1","php-8.1.0RC3","php-8.0.11","php-8.1.0RC2","php-8.0.11RC1","php-8.1.0RC1","php-8.0.10","php-8.1.0beta3","php-8.0.10RC1","php-8.1.0beta2","php-8.0.9","php-8.1.0beta1","php-8.0.9RC1","php-8.1.0alpha3","php-8.0.8","php-8.1.0alpha2","php-8.0.8RC1","php-8.1.0alpha1","php-8.0.7","php-8.0.7RC1","php-8.0.6","php-8.0.5","php-8.0.5RC1","php-8.0.4RC1","php-8.0.3","php-8.0.3RC1","php-8.0.2","php-8.0.2RC1","php-8.0.1","php-8.0.1RC1","php-8.0.0","php-8.0.0RC5","php-8.0.0RC4","php-8.0.0RC3","php-8.0.0RC2","php-8.0.0rc1","php-8.0.0beta4","php-8.0.0beta3"],"ecosystem_specific":{"severity":"HIGH"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/php/OSV-2021-1199.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38001"}]} |