CVE-2025-1735

highpriority · track · 30EPSS 0.012 · 67 %ileDEEURUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

1.16% (67th) EPSS

CVSS 7.5 · high

Is it mine?

92 products

Check your exposure

Who says so?

6 sources

cnnvd · enisa_euvd · fstec_bdu · osv

EPSS · scored 2026-10-27

In PHP versions:8.1.* before 8.1.33, 8.2.* before 8.2.29, 8.3.* before 8.3.23, 8.4.* pgsql and pdo_pgsql escaping functions do not check if the underlying quoting functions returned errors. This could cause crashes if Postgres server rejects the string as invalid.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

Fixedapcu-panel-0:5.1.23-1.module+el9.4.0+20748+b46899d2.noarch::php:8.2 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-0:8.2.30-1.module+el9.7.0+23849+7b831f17.x86_64::php:8.2 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-bcmath-0:8.2.30-1.module+el9.7.0+23849+7b831f17.x86_64::php:8.2 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-cli-0:8.2.30-1.module+el9.7.0+23849+7b831f17.x86_64::php:8.2 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-common-0:8.2.30-1.module+el9.7.0+23849+7b831f17.x86_64::php:8.2 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-dba-0:8.2.30-1.module+el9.7.0+23849+7b831f17.x86_64::php:8.2 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-dbg-0:8.2.30-1.module+el9.7.0+23849+7b831f17.x86_64::php:8.2 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-devel-0:8.2.30-1.module+el9.7.0+23849+7b831f17.x86_64::php:8.2 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-embedded-0:8.2.30-1.module+el9.7.0+23849+7b831f17.x86_64::php:8.2 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-enchant-0:8.2.30-1.module+el9.7.0+23849+7b831f17.x86_64::php:8.2 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-ffi-0:8.2.30-1.module+el9.7.0+23849+7b831f17.x86_64::php:8.2 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-fpm-0:8.2.30-1.module+el9.7.0+23849+7b831f17.x86_64::php:8.2 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-gd-0:8.2.30-1.module+el9.7.0+23849+7b831f17.x86_64::php:8.2 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-gmp-0:8.2.30-1.module+el9.7.0+23849+7b831f17.x86_64::php:8.2 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-intl-0:8.2.30-1.module+el9.7.0+23849+7b831f17.x86_64::php:8.2 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-ldap-0:8.2.30-1.module+el9.7.0+23849+7b831f17.x86_64::php:8.2 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-mbstring-0:8.2.30-1.module+el9.7.0+23849+7b831f17.x86_64::php:8.2 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-mysqlnd-0:8.2.30-1.module+el9.7.0+23849+7b831f17.x86_64::php:8.2 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-odbc-0:8.2.30-1.module+el9.7.0+23849+7b831f17.x86_64::php:8.2 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-opcache-0:8.2.30-1.module+el9.7.0+23849+7b831f17.x86_64::php:8.2 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-pdo-0:8.2.30-1.module+el9.7.0+23849+7b831f17.x86_64::php:8.2 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-pecl-apcu-0:5.1.23-1.module+el9.4.0+20748+b46899d2.x86_64::php:8.2 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-pecl-apcu-devel-0:5.1.23-1.module+el9.4.0+20748+b46899d2.x86_64::php:8.2 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-pecl-rrd-0:2.0.3-4.module+el9.4.0+20748+b46899d2.x86_64::php:8.2 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-pecl-xdebug3-0:3.2.2-2.module+el9.4.0+20796+bd4564df.x86_64::php:8.2 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-pecl-zip-0:1.22.3-1.module+el9.4.0+20748+b46899d2.x86_64::php:8.2 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-pgsql-0:8.2.30-1.module+el9.7.0+23849+7b831f17.x86_64::php:8.2 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-process-0:8.2.30-1.module+el9.7.0+23849+7b831f17.x86_64::php:8.2 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-snmp-0:8.2.30-1.module+el9.7.0+23849+7b831f17.x86_64::php:8.2 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-soap-0:8.2.30-1.module+el9.7.0+23849+7b831f17.x86_64::php:8.2 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-xml-0:8.2.30-1.module+el9.7.0+23849+7b831f17.x86_64::php:8.2 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedapcu-panel-0:5.1.23-1.module+el8.10.0+20770+a5eca186.noarch::php:8.2 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibzip-0:1.7.3-1.module+el8.10.0+20770+a5eca186.x86_64::php:8.2 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibzip-devel-0:1.7.3-1.module+el8.10.0+20770+a5eca186.x86_64::php:8.2 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibzip-tools-0:1.7.3-1.module+el8.10.0+20770+a5eca186.x86_64::php:8.2 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-0:8.2.30-1.module+el8.10.0+23848+33d54484.x86_64::php:8.2 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-bcmath-0:8.2.30-1.module+el8.10.0+23848+33d54484.x86_64::php:8.2 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-cli-0:8.2.30-1.module+el8.10.0+23848+33d54484.x86_64::php:8.2 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-common-0:8.2.30-1.module+el8.10.0+23848+33d54484.x86_64::php:8.2 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-dba-0:8.2.30-1.module+el8.10.0+23848+33d54484.x86_64::php:8.2 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-dbg-0:8.2.30-1.module+el8.10.0+23848+33d54484.x86_64::php:8.2 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-devel-0:8.2.30-1.module+el8.10.0+23848+33d54484.x86_64::php:8.2 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-embedded-0:8.2.30-1.module+el8.10.0+23848+33d54484.x86_64::php:8.2 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-enchant-0:8.2.30-1.module+el8.10.0+23848+33d54484.x86_64::php:8.2 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-ffi-0:8.2.30-1.module+el8.10.0+23848+33d54484.x86_64::php:8.2 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-fpm-0:8.2.30-1.module+el8.10.0+23848+33d54484.x86_64::php:8.2 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-gd-0:8.2.30-1.module+el8.10.0+23848+33d54484.x86_64::php:8.2 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-gmp-0:8.2.30-1.module+el8.10.0+23848+33d54484.x86_64::php:8.2 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-intl-0:8.2.30-1.module+el8.10.0+23848+33d54484.x86_64::php:8.2 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-ldap-0:8.2.30-1.module+el8.10.0+23848+33d54484.x86_64::php:8.2 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-mbstring-0:8.2.30-1.module+el8.10.0+23848+33d54484.x86_64::php:8.2 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-mysqlnd-0:8.2.30-1.module+el8.10.0+23848+33d54484.x86_64::php:8.2 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-odbc-0:8.2.30-1.module+el8.10.0+23848+33d54484.x86_64::php:8.2 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-opcache-0:8.2.30-1.module+el8.10.0+23848+33d54484.x86_64::php:8.2 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-pdo-0:8.2.30-1.module+el8.10.0+23848+33d54484.x86_64::php:8.2 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-pear-1:1.10.14-1.module+el8.10.0+20770+a5eca186.noarch::php:8.2 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-pecl-apcu-0:5.1.23-1.module+el8.10.0+20770+a5eca186.x86_64::php:8.2 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-pecl-apcu-devel-0:5.1.23-1.module+el8.10.0+20770+a5eca186.x86_64::php:8.2 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-pecl-rrd-0:2.0.3-1.module+el8.10.0+20770+a5eca186.x86_64::php:8.2 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-pecl-xdebug3-0:3.2.2-2.module+el8.10.0+20798+00eaeb41.x86_64::php:8.2 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-pecl-zip-0:1.22.3-1.module+el8.10.0+20770+a5eca186.x86_64::php:8.2 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-pgsql-0:8.2.30-1.module+el8.10.0+23848+33d54484.x86_64::php:8.2 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-process-0:8.2.30-1.module+el8.10.0+23848+33d54484.x86_64::php:8.2 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-snmp-0:8.2.30-1.module+el8.10.0+23848+33d54484.x86_64::php:8.2 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-soap-0:8.2.30-1.module+el8.10.0+23848+33d54484.x86_64::php:8.2 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-xml-0:8.2.30-1.module+el8.10.0+23848+33d54484.x86_64::php:8.2 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedapcu-panel-0:5.1.18-1.module+el8.10.0+22485+a3539972.noarch::php:7.4 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibzip-0:1.6.1-1.module+el8.10.0+22485+a3539972.x86_64::php:7.4 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibzip-devel-0:1.6.1-1.module+el8.10.0+22485+a3539972.x86_64::php:7.4 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibzip-tools-0:1.6.1-1.module+el8.10.0+22485+a3539972.x86_64::php:7.4 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-0:7.4.33-3.module+el8.10.0+23902+d3c8dd8f.x86_64::php:7.4 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-bcmath-0:7.4.33-3.module+el8.10.0+23902+d3c8dd8f.x86_64::php:7.4 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-cli-0:7.4.33-3.module+el8.10.0+23902+d3c8dd8f.x86_64::php:7.4 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-common-0:7.4.33-3.module+el8.10.0+23902+d3c8dd8f.x86_64::php:7.4 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-dba-0:7.4.33-3.module+el8.10.0+23902+d3c8dd8f.x86_64::php:7.4 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-dbg-0:7.4.33-3.module+el8.10.0+23902+d3c8dd8f.x86_64::php:7.4 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-devel-0:7.4.33-3.module+el8.10.0+23902+d3c8dd8f.x86_64::php:7.4 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-embedded-0:7.4.33-3.module+el8.10.0+23902+d3c8dd8f.x86_64::php:7.4 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-enchant-0:7.4.33-3.module+el8.10.0+23902+d3c8dd8f.x86_64::php:7.4 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-ffi-0:7.4.33-3.module+el8.10.0+23902+d3c8dd8f.x86_64::php:7.4 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-fpm-0:7.4.33-3.module+el8.10.0+23902+d3c8dd8f.x86_64::php:7.4 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-gd-0:7.4.33-3.module+el8.10.0+23902+d3c8dd8f.x86_64::php:7.4 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-gmp-0:7.4.33-3.module+el8.10.0+23902+d3c8dd8f.x86_64::php:7.4 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-intl-0:7.4.33-3.module+el8.10.0+23902+d3c8dd8f.x86_64::php:7.4 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-json-0:7.4.33-3.module+el8.10.0+23902+d3c8dd8f.x86_64::php:7.4 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-ldap-0:7.4.33-3.module+el8.10.0+23902+d3c8dd8f.x86_64::php:7.4 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-mbstring-0:7.4.33-3.module+el8.10.0+23902+d3c8dd8f.x86_64::php:7.4 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-mysqlnd-0:7.4.33-3.module+el8.10.0+23902+d3c8dd8f.x86_64::php:7.4 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-odbc-0:7.4.33-3.module+el8.10.0+23902+d3c8dd8f.x86_64::php:7.4 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-opcache-0:7.4.33-3.module+el8.10.0+23902+d3c8dd8f.x86_64::php:7.4 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-pdo-0:7.4.33-3.module+el8.10.0+23902+d3c8dd8f.x86_64::php:7.4 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-pear-1:1.10.13-1.module+el8.10.0+22485+a3539972.noarch::php:7.4 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-pecl-apcu-0:5.1.18-1.module+el8.10.0+22485+a3539972.x86_64::php:7.4 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-pecl-apcu-devel-0:5.1.18-1.module+el8.10.0+22485+a3539972.x86_64::php:7.4 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-pecl-rrd-0:2.0.1-1.module+el8.10.0+22485+a3539972.x86_64::php:7.4 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-pecl-xdebug-0:2.9.5-1.module+el8.10.0+22485+a3539972.x86_64::php:7.4 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-pecl-zip-0:1.18.2-1.module+el8.10.0+22485+a3539972.x86_64::php:7.4 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-pgsql-0:7.4.33-3.module+el8.10.0+23902+d3c8dd8f.x86_64::php:7.4 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-process-0:7.4.33-3.module+el8.10.0+23902+d3c8dd8f.x86_64::php:7.4 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-snmp-0:7.4.33-3.module+el8.10.0+23902+d3c8dd8f.x86_64::php:7.4 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-soap-0:7.4.33-3.module+el8.10.0+23902+d3c8dd8f.x86_64::php:7.4 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-xml-0:7.4.33-3.module+el8.10.0+23902+d3c8dd8f.x86_64::php:7.4 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-xmlrpc-0:7.4.33-3.module+el8.10.0+23902+d3c8dd8f.x86_64::php:7.4 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

cvss

Technical severity, 0–10. One row per scoring source.

7.5

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 5.9–7.5

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hprimary · NVD / NIST USexploitability 3.9 · impact 3.6

v3.15.9mediumAV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · FSTEC (BDU) RU

v3.15.9mediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · ENISA EU

v3.15.9mediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · security@php.netexploitability 2.2 · impact 3.6

v3.16.9mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:Usecondary · CVSS-BT (t0sche)

v3.15.9mediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · SUSE Product Security

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Trackcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-476USCWE-89USCWE-89US

affected products (92)

Products and version ranges known to be affected.

Amazon Linux 2all versionscert_bundDEcpe:/o:amazon:linux_2:-
Debian Linuxall versionscert_bundDEcpe:/o:debian:debian_linux:-
Fedora Linuxall versionscert_bundDEcpe:/o:fedoraproject:fedora:-
Open Source PHP <8.1.33all versionscert_bundDE
Open Source PHP <8.2.29all versionscert_bundDE
Open Source PHP <8.3.23all versionscert_bundDE
Open Source PHP <8.4.10all versionscert_bundDE
Oracle Linuxall versionscert_bundDEcpe:/o:oracle:linux:-
RESF Rocky Linuxall versionscert_bundDEcpe:/o:resf:rocky_linux:-
Red Hat Enterprise Linuxall versionscert_bundDEcpe:/o:redhat:enterprise_linux:-
SUSE Linuxall versionscert_bundDEcpe:/o:suse:suse_linux:-
SUSE openSUSEall versionscert_bundDEcpe:/o:suse:opensuse:-
Ubuntu Linuxall versionscert_bundDEcpe:/o:canonical:ubuntu_linux:-
Xerox FreeFlow Print Server v7all versionscert_bundDEcpe:/a:xerox:freeflow_print_server:v7
cPanel cPanel/WHM 126.0.63all versionscert_bundDEcpe:/a:cpanel:cpanel_whm:126.0.63
cPanel cPanel/WHM <110.0.70all versionscert_bundDE
cPanel cPanel/WHM <118.0.52all versionscert_bundDE
cPanel cPanel/WHM <126.0.27all versionscert_bundDE
cPanel cPanel/WHM <128.0.17all versionscert_bundDE
cPanel cPanel/WHM <130.0.3all versionscert_bundDE

showing 20 of 92

advisories (7)

Vendor and ecosystem advisories describing this.

RHSA-2026:1409security update for php2026-01-27csaf · suse_csafDE
security update for php
RHSA-2026:1412security update for libzip2026-01-27csaf · suse_csafDE
security update for libzip
RHSA-2026:2470security update for libzip2026-02-10csaf · suse_csafDE
security update for libzip
WID-SEC-W-2025-1460PHP: Mehrere SchwachstellenDeutsch2025-07-03csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen in PHP ausnutzen, um Denial of Service oder Server-Side Request-Forgery Angriffe durchzuführen.
BIT-libphp-2025-1735pgsql extension does not check for errors during escaping2025-08-11vendor · osvUS
In PHP versions:8.1.* before 8.1.33, 8.2.* before 8.2.29, 8.3.* before 8.3.23, 8.4.* pgsql and pdo_pgsql escaping functions do not check if the underlying quoting functions returned errors. This could cause crashes if Postgres server rejects the string as invalid.
BIT-php-2025-1735pgsql extension does not check for errors during escaping2025-07-16vendor · osvUS
In PHP versions:8.1.* before 8.1.33, 8.2.* before 8.2.29, 8.3.* before 8.3.23, 8.4.* pgsql and pdo_pgsql escaping functions do not check if the underlying quoting functions returned errors. This could cause crashes if Postgres server rejects the string as invalid.
BIT-php-min-2025-1735pgsql extension does not check for errors during escaping2025-07-16vendor · osvUS
In PHP versions:8.1.* before 8.1.33, 8.2.* before 8.2.29, 8.3.* before 8.3.23, 8.4.* pgsql and pdo_pgsql escaping functions do not check if the underlying quoting functions returned errors. This could cause crashes if Postgres server rejects the string as invalid.

also known as (7)

Other names and identifiers for this entity.

CNNVD-202507-1799 cnnvd
EUVD-2025-21273 enisa_euvd
BDU:2025-10413 fstec_bdu
BIT-libphp-2025-1735osv
BIT-php-2025-1735osv
BIT-php-min-2025-1735osv
GHSA-hrwm-9436-5mv3 osv

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu osv cert_bund suse_csaf NVD CVE.org MITRE

published 2025-07-13modified 2026-09-23

references (7)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan