Vulnerability Database · OSS-Fuzz · php · Version
php php-7.1.18
php-7.1.18 is affected by 8 vulnerabilities.
The vulnerabilities that cover this exact version are listed below with the fixed version to move to.
Critical 0 High 4 Medium 1 Low 0 Unrated 3
-
Database updated 23/Oct/2026
Concerned about your application's security?
Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.
01 Vulnerabilities affecting this version
php php-7.1.18 vulnerabilities
8 vulnerabilities cover php php-7.1.18. Open the full list in the database.
| Vulnerability | Severity | Fixed version | Disclosed |
|---|---|---|---|
| Heap-use-after-free in zend_jit_trace_execute in php | N/A high | No fix published | 31 Oct 2023 |
| Segv on unknown address in cleanup_live_vars in php | N/A unrated | No fix published | 27 Oct 2023 |
| Heap-buffer-overflow in zim_ReflectionEnumBackedCase_getBackingValue in php | N/A medium | No fix published | 13 Jul 2022 |
| Segv on unknown address in i_zval_ptr_dtor | N/A unrated | No fix published | 12 Mar 2022 |
| Heap-use-after-free vulnerability in php | N/A high | No fix published | 21 Feb 2022 |
| Heap-use-after-free vulnerability in php | N/A high | No fix published | 29 Dec 2021 |
| Heap-use-after-free vulnerability in php | N/A high | No fix published | 25 Dec 2021 |
| Stack-use-after-return in zend_fiber_suspend_context in php | N/A unrated | ed33262dbbc9a39c43c5de75be6aa89c1a3a71a8 | 08 May 2021 |
Looking for another version, or everything Vulert holds for php?
Questions
About php php-7.1.18
Is php php-7.1.18 vulnerable?
Yes. 8 vulnerabilities in the Vulert database cover php php-7.1.18: 0 critical, 4 high, 1 medium and 0 low, plus 3 not yet rated. Each entry above names the fixed version to move to.
How do I monitor php for upcoming vulnerabilities?
Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the php version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.