CVE-2025-6491

mediumpriority · track · 0EPSS 0.011 · 66 %ileDEEURUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

1.12% (66th) EPSS

CVSS 5.9 · medium

Is it mine?

85 products

Check your exposure

Who says so?

6 sources

cnnvd · enisa_euvd · fstec_bdu · osv

EPSS · scored 2026-10-27

In PHP versions:8.1.* before 8.1.33, 8.2.* before 8.2.29, 8.3.* before 8.3.23, 8.4.* before 8.4.10 when parsing XML data in SOAP extensions, overly large (>2Gb) XML namespace prefix may lead to null pointer dereference. This may lead to crashes and affect the availability of the target server.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

Fixedapcu-panel-0:5.1.23-1.module+el9.4.0+20748+b46899d2.noarch::php:8.2 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-0:8.2.30-1.module+el9.7.0+23849+7b831f17.x86_64::php:8.2 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-bcmath-0:8.2.30-1.module+el9.7.0+23849+7b831f17.x86_64::php:8.2 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-cli-0:8.2.30-1.module+el9.7.0+23849+7b831f17.x86_64::php:8.2 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-common-0:8.2.30-1.module+el9.7.0+23849+7b831f17.x86_64::php:8.2 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-dba-0:8.2.30-1.module+el9.7.0+23849+7b831f17.x86_64::php:8.2 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-dbg-0:8.2.30-1.module+el9.7.0+23849+7b831f17.x86_64::php:8.2 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-devel-0:8.2.30-1.module+el9.7.0+23849+7b831f17.x86_64::php:8.2 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-embedded-0:8.2.30-1.module+el9.7.0+23849+7b831f17.x86_64::php:8.2 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-enchant-0:8.2.30-1.module+el9.7.0+23849+7b831f17.x86_64::php:8.2 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-ffi-0:8.2.30-1.module+el9.7.0+23849+7b831f17.x86_64::php:8.2 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-fpm-0:8.2.30-1.module+el9.7.0+23849+7b831f17.x86_64::php:8.2 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-gd-0:8.2.30-1.module+el9.7.0+23849+7b831f17.x86_64::php:8.2 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-gmp-0:8.2.30-1.module+el9.7.0+23849+7b831f17.x86_64::php:8.2 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-intl-0:8.2.30-1.module+el9.7.0+23849+7b831f17.x86_64::php:8.2 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-ldap-0:8.2.30-1.module+el9.7.0+23849+7b831f17.x86_64::php:8.2 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-mbstring-0:8.2.30-1.module+el9.7.0+23849+7b831f17.x86_64::php:8.2 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-mysqlnd-0:8.2.30-1.module+el9.7.0+23849+7b831f17.x86_64::php:8.2 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-odbc-0:8.2.30-1.module+el9.7.0+23849+7b831f17.x86_64::php:8.2 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-opcache-0:8.2.30-1.module+el9.7.0+23849+7b831f17.x86_64::php:8.2 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-pdo-0:8.2.30-1.module+el9.7.0+23849+7b831f17.x86_64::php:8.2 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-pecl-apcu-0:5.1.23-1.module+el9.4.0+20748+b46899d2.x86_64::php:8.2 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-pecl-apcu-devel-0:5.1.23-1.module+el9.4.0+20748+b46899d2.x86_64::php:8.2 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-pecl-rrd-0:2.0.3-4.module+el9.4.0+20748+b46899d2.x86_64::php:8.2 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-pecl-xdebug3-0:3.2.2-2.module+el9.4.0+20796+bd4564df.x86_64::php:8.2 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-pecl-zip-0:1.22.3-1.module+el9.4.0+20748+b46899d2.x86_64::php:8.2 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-pgsql-0:8.2.30-1.module+el9.7.0+23849+7b831f17.x86_64::php:8.2 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-process-0:8.2.30-1.module+el9.7.0+23849+7b831f17.x86_64::php:8.2 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-snmp-0:8.2.30-1.module+el9.7.0+23849+7b831f17.x86_64::php:8.2 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-soap-0:8.2.30-1.module+el9.7.0+23849+7b831f17.x86_64::php:8.2 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-xml-0:8.2.30-1.module+el9.7.0+23849+7b831f17.x86_64::php:8.2 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedapcu-panel-0:5.1.23-1.module+el8.10.0+20770+a5eca186.noarch::php:8.2 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibzip-0:1.7.3-1.module+el8.10.0+20770+a5eca186.x86_64::php:8.2 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibzip-devel-0:1.7.3-1.module+el8.10.0+20770+a5eca186.x86_64::php:8.2 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibzip-tools-0:1.7.3-1.module+el8.10.0+20770+a5eca186.x86_64::php:8.2 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-0:8.2.30-1.module+el8.10.0+23848+33d54484.x86_64::php:8.2 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-bcmath-0:8.2.30-1.module+el8.10.0+23848+33d54484.x86_64::php:8.2 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-cli-0:8.2.30-1.module+el8.10.0+23848+33d54484.x86_64::php:8.2 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-common-0:8.2.30-1.module+el8.10.0+23848+33d54484.x86_64::php:8.2 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-dba-0:8.2.30-1.module+el8.10.0+23848+33d54484.x86_64::php:8.2 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-dbg-0:8.2.30-1.module+el8.10.0+23848+33d54484.x86_64::php:8.2 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-devel-0:8.2.30-1.module+el8.10.0+23848+33d54484.x86_64::php:8.2 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-embedded-0:8.2.30-1.module+el8.10.0+23848+33d54484.x86_64::php:8.2 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-enchant-0:8.2.30-1.module+el8.10.0+23848+33d54484.x86_64::php:8.2 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-ffi-0:8.2.30-1.module+el8.10.0+23848+33d54484.x86_64::php:8.2 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-fpm-0:8.2.30-1.module+el8.10.0+23848+33d54484.x86_64::php:8.2 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-gd-0:8.2.30-1.module+el8.10.0+23848+33d54484.x86_64::php:8.2 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-gmp-0:8.2.30-1.module+el8.10.0+23848+33d54484.x86_64::php:8.2 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-intl-0:8.2.30-1.module+el8.10.0+23848+33d54484.x86_64::php:8.2 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-ldap-0:8.2.30-1.module+el8.10.0+23848+33d54484.x86_64::php:8.2 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-mbstring-0:8.2.30-1.module+el8.10.0+23848+33d54484.x86_64::php:8.2 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-mysqlnd-0:8.2.30-1.module+el8.10.0+23848+33d54484.x86_64::php:8.2 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-odbc-0:8.2.30-1.module+el8.10.0+23848+33d54484.x86_64::php:8.2 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-opcache-0:8.2.30-1.module+el8.10.0+23848+33d54484.x86_64::php:8.2 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-pdo-0:8.2.30-1.module+el8.10.0+23848+33d54484.x86_64::php:8.2 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-pear-1:1.10.14-1.module+el8.10.0+20770+a5eca186.noarch::php:8.2 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-pecl-apcu-0:5.1.23-1.module+el8.10.0+20770+a5eca186.x86_64::php:8.2 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-pecl-apcu-devel-0:5.1.23-1.module+el8.10.0+20770+a5eca186.x86_64::php:8.2 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-pecl-rrd-0:2.0.3-1.module+el8.10.0+20770+a5eca186.x86_64::php:8.2 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-pecl-xdebug3-0:3.2.2-2.module+el8.10.0+20798+00eaeb41.x86_64::php:8.2 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-pecl-zip-0:1.22.3-1.module+el8.10.0+20770+a5eca186.x86_64::php:8.2 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-pgsql-0:8.2.30-1.module+el8.10.0+23848+33d54484.x86_64::php:8.2 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-process-0:8.2.30-1.module+el8.10.0+23848+33d54484.x86_64::php:8.2 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-snmp-0:8.2.30-1.module+el8.10.0+23848+33d54484.x86_64::php:8.2 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-soap-0:8.2.30-1.module+el8.10.0+23848+33d54484.x86_64::php:8.2 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-xml-0:8.2.30-1.module+el8.10.0+23848+33d54484.x86_64::php:8.2 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedapcu-panel-0:5.1.18-1.module+el8.10.0+22485+a3539972.noarch::php:7.4 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibzip-0:1.6.1-1.module+el8.10.0+22485+a3539972.x86_64::php:7.4 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibzip-devel-0:1.6.1-1.module+el8.10.0+22485+a3539972.x86_64::php:7.4 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibzip-tools-0:1.6.1-1.module+el8.10.0+22485+a3539972.x86_64::php:7.4 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-0:7.4.33-3.module+el8.10.0+23902+d3c8dd8f.x86_64::php:7.4 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-bcmath-0:7.4.33-3.module+el8.10.0+23902+d3c8dd8f.x86_64::php:7.4 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-cli-0:7.4.33-3.module+el8.10.0+23902+d3c8dd8f.x86_64::php:7.4 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-common-0:7.4.33-3.module+el8.10.0+23902+d3c8dd8f.x86_64::php:7.4 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-dba-0:7.4.33-3.module+el8.10.0+23902+d3c8dd8f.x86_64::php:7.4 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-dbg-0:7.4.33-3.module+el8.10.0+23902+d3c8dd8f.x86_64::php:7.4 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-devel-0:7.4.33-3.module+el8.10.0+23902+d3c8dd8f.x86_64::php:7.4 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-embedded-0:7.4.33-3.module+el8.10.0+23902+d3c8dd8f.x86_64::php:7.4 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-enchant-0:7.4.33-3.module+el8.10.0+23902+d3c8dd8f.x86_64::php:7.4 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-ffi-0:7.4.33-3.module+el8.10.0+23902+d3c8dd8f.x86_64::php:7.4 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-fpm-0:7.4.33-3.module+el8.10.0+23902+d3c8dd8f.x86_64::php:7.4 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-gd-0:7.4.33-3.module+el8.10.0+23902+d3c8dd8f.x86_64::php:7.4 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-gmp-0:7.4.33-3.module+el8.10.0+23902+d3c8dd8f.x86_64::php:7.4 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-intl-0:7.4.33-3.module+el8.10.0+23902+d3c8dd8f.x86_64::php:7.4 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-json-0:7.4.33-3.module+el8.10.0+23902+d3c8dd8f.x86_64::php:7.4 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-ldap-0:7.4.33-3.module+el8.10.0+23902+d3c8dd8f.x86_64::php:7.4 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-mbstring-0:7.4.33-3.module+el8.10.0+23902+d3c8dd8f.x86_64::php:7.4 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-mysqlnd-0:7.4.33-3.module+el8.10.0+23902+d3c8dd8f.x86_64::php:7.4 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-odbc-0:7.4.33-3.module+el8.10.0+23902+d3c8dd8f.x86_64::php:7.4 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-opcache-0:7.4.33-3.module+el8.10.0+23902+d3c8dd8f.x86_64::php:7.4 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-pdo-0:7.4.33-3.module+el8.10.0+23902+d3c8dd8f.x86_64::php:7.4 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-pear-1:1.10.13-1.module+el8.10.0+22485+a3539972.noarch::php:7.4 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-pecl-apcu-0:5.1.18-1.module+el8.10.0+22485+a3539972.x86_64::php:7.4 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-pecl-apcu-devel-0:5.1.18-1.module+el8.10.0+22485+a3539972.x86_64::php:7.4 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-pecl-rrd-0:2.0.1-1.module+el8.10.0+22485+a3539972.x86_64::php:7.4 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-pecl-xdebug-0:2.9.5-1.module+el8.10.0+22485+a3539972.x86_64::php:7.4 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-pecl-zip-0:1.18.2-1.module+el8.10.0+22485+a3539972.x86_64::php:7.4 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-pgsql-0:7.4.33-3.module+el8.10.0+23902+d3c8dd8f.x86_64::php:7.4 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-process-0:7.4.33-3.module+el8.10.0+23902+d3c8dd8f.x86_64::php:7.4 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-snmp-0:7.4.33-3.module+el8.10.0+23902+d3c8dd8f.x86_64::php:7.4 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-soap-0:7.4.33-3.module+el8.10.0+23902+d3c8dd8f.x86_64::php:7.4 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-xml-0:7.4.33-3.module+el8.10.0+23902+d3c8dd8f.x86_64::php:7.4 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedphp-xmlrpc-0:7.4.33-3.module+el8.10.0+23902+d3c8dd8f.x86_64::php:7.4 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

cvss

Technical severity, 0–10. One row per scoring source.

5.9

010

base score 0–10 · higher = more severe · hover a vector to decode

v3.15.9mediumAV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · FSTEC (BDU) RU

v3.15.9mediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · ENISA EU

v3.15.9mediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · security@php.netexploitability 2.2 · impact 3.6

v3.15.4mediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:Usecondary · CVSS-BT (t0sche)

v3.15.9mediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · SUSE Product Security

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: poc · Automatable: no · Technical Impact: partialcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-476USCWE-476US

affected products (85)

Products and version ranges known to be affected.

Amazon Linux 2all versionscert_bundDEcpe:/o:amazon:linux_2:-
Debian Linuxall versionscert_bundDEcpe:/o:debian:debian_linux:-
Fedora Linuxall versionscert_bundDEcpe:/o:fedoraproject:fedora:-
Oracle Communicationsall versionscert_bundDEcpe:/a:oracle:communications:-
Oracle Linuxall versionscert_bundDEcpe:/o:oracle:linux:-
RESF Rocky Linuxall versionscert_bundDEcpe:/o:resf:rocky_linux:-
Red Hat Enterprise Linuxall versionscert_bundDEcpe:/o:redhat:enterprise_linux:-
SUSE Linuxall versionscert_bundDEcpe:/o:suse:suse_linux:-
SUSE openSUSEall versionscert_bundDEcpe:/o:suse:opensuse:-
Ubuntu Linuxall versionscert_bundDEcpe:/o:canonical:ubuntu_linux:-
Xerox FreeFlow Print Server v7all versionscert_bundDEcpe:/a:xerox:freeflow_print_server:v7
cPanel cPanel/WHM 126.0.63all versionscert_bundDEcpe:/a:cpanel:cpanel_whm:126.0.63
Open Source PHP< 8.1.33cert_bundDE
Open Source PHP< 8.2.29cert_bundDE
Open Source PHP< 8.3.23cert_bundDE
Open Source PHP< 8.4.10cert_bundDE
cPanel cPanel/WHM< 110.0.70cert_bundDE
cPanel cPanel/WHM< 118.0.52cert_bundDE
cPanel cPanel/WHM< 126.0.27cert_bundDE
cPanel cPanel/WHM< 128.0.17cert_bundDE

showing 20 of 85

advisories (8)

Vendor and ecosystem advisories describing this.

RHSA-2026:1409security update for php2026-01-27csaf · suse_csafDE
security update for php
RHSA-2026:1412security update for libzip2026-01-27csaf · suse_csafDE
security update for libzip
RHSA-2026:2470security update for libzip2026-02-10csaf · suse_csafDE
security update for libzip
WID-SEC-W-2025-1460PHP: Mehrere SchwachstellenDeutsch2025-07-03csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen in PHP ausnutzen, um Denial of Service oder Server-Side Request-Forgery Angriffe durchzuführen.
WID-SEC-W-2026-2437Oracle Communications: Mehrere SchwachstellenDeutsch2026-07-21csaf · cert_bundDE
Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Communications ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.
BIT-libphp-2025-6491NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix2025-08-11vendor · osvUS
In PHP versions:8.1.* before 8.1.33, 8.2.* before 8.2.29, 8.3.* before 8.3.23, 8.4.* before 8.4.10 when parsing XML data in SOAP extensions, overly large (>2Gb) XML namespace prefix may lead to null pointer dereference. This may lead to crashes and affect the availability of the target server.
BIT-php-2025-6491NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix2025-07-16vendor · osvUS
In PHP versions:8.1.* before 8.1.33, 8.2.* before 8.2.29, 8.3.* before 8.3.23, 8.4.* before 8.4.10 when parsing XML data in SOAP extensions, overly large (>2Gb) XML namespace prefix may lead to null pointer dereference. This may lead to crashes and affect the availability of the target server.
BIT-php-min-2025-6491NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix2025-07-16vendor · osvUS
In PHP versions:8.1.* before 8.1.33, 8.2.* before 8.2.29, 8.3.* before 8.3.23, 8.4.* before 8.4.10 when parsing XML data in SOAP extensions, overly large (>2Gb) XML namespace prefix may lead to null pointer dereference. This may lead to crashes and affect the availability of the target server.

also known as (7)

Other names and identifiers for this entity.

CNNVD-202507-1791 cnnvd
EUVD-2025-21276 enisa_euvd
BDU:2025-10415 fstec_bdu
BIT-libphp-2025-6491osv
BIT-php-2025-6491osv
BIT-php-min-2025-6491osv
GHSA-453j-q27h-5p8x osv

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu osv cert_bund suse_csaf NVD CVE.org MITRE

published 2025-07-13modified 2026-09-23

references (7)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan