Vulnerability Database · OSS-Fuzz · php · Version
php php-8.0.0RC2
php-8.0.0RC2 is affected by 10 vulnerabilities.
The vulnerabilities that cover this exact version are listed below with the fixed version to move to.
Critical 0 High 6 Medium 2 Low 0 Unrated 2
-
Database updated 23/Oct/2026
Concerned about your application's security?
Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.
01 Vulnerabilities affecting this version
php php-8.0.0RC2 vulnerabilities
10 vulnerabilities cover php php-8.0.0RC2. Open the full list in the database.
| Vulnerability | Severity | Fixed version | Disclosed |
|---|---|---|---|
| Heap-use-after-free in zend_jit_trace_execute in php | N/A high | No fix published | 31 Oct 2023 |
| Segv on unknown address in cleanup_live_vars in php | N/A unrated | No fix published | 27 Oct 2023 |
| Heap-buffer-overflow in zim_ReflectionEnumBackedCase_getBackingValue in php | N/A medium | No fix published | 13 Jul 2022 |
| Segv on unknown address in i_zval_ptr_dtor | N/A unrated | No fix published | 12 Mar 2022 |
| Heap-use-after-free vulnerability in php | N/A high | No fix published | 21 Feb 2022 |
| Heap-use-after-free vulnerability in php | N/A high | No fix published | 29 Dec 2021 |
| Heap-use-after-free vulnerability in php | N/A high | No fix published | 25 Dec 2021 |
| Heap-use-after-free in zend_hash_iterator_pos_ex in PHP | N/A high | 5875bf754ed4fc64a6f0b7d62734d2a816c51017 | 28 Feb 2021 |
| Heap-buffer-overflow in _zend_is_inconsistent in php | N/A medium | f06afc434aec631f18f8da8ffca9a6f0559e1acf | 04 Dec 2020 |
| Heap-use-after-free in zend_gc_addref in PHP | N/A high | dd4a080133b7b0570b629cdfb7c9e2651bdf88f7 | 17 Sep 2020 |
Looking for another version, or everything Vulert holds for php?
Questions
About php php-8.0.0RC2
Is php php-8.0.0RC2 vulnerable?
Yes. 10 vulnerabilities in the Vulert database cover php php-8.0.0RC2: 0 critical, 6 high, 2 medium and 0 low, plus 2 not yet rated. Each entry above names the fixed version to move to.
How do I monitor php for upcoming vulnerabilities?
Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the php version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.