Vulnerability Database · OSS-Fuzz · php · Version

php php-8.1.4RC1

php-8.1.4RC1 is affected by 11 vulnerabilities.

The vulnerabilities that cover this exact version are listed below with the fixed version to move to.

Critical 0 High 7 Medium 1 Low 0 Unrated 3

Database updated 23/Oct/2026

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Vulnerabilities affecting this version

php php-8.1.4RC1 vulnerabilities

11 vulnerabilities cover php php-8.1.4RC1. Scroll the table for all of them, or open the full list in the database.

Vulnerability Severity Fixed version Disclosed
Heap-use-after-free in zend_jit_trace_execute in php N/A high No fix published 31 Oct 2023
Segv on unknown address in cleanup_live_vars in php N/A unrated No fix published 27 Oct 2023
Heap-use-after-free vulnerability in user_wrapper_opendir in php N/A high 09aa27cc0993e321678b6e66a1d3fc428b6e3c59 08 Sep 2022
Heap-buffer-overflow in zim_ReflectionEnumBackedCase_getBackingValue in php N/A medium No fix published 13 Jul 2022
Segv on unknown address in i_zval_ptr_dtor N/A unrated No fix published 12 Mar 2022
Heap-use-after-free vulnerability in php N/A high No fix published 21 Feb 2022
Heap-use-after-free vulnerability in php N/A high No fix published 29 Dec 2021
Heap-use-after-free vulnerability in php N/A high No fix published 25 Dec 2021
Dynamic-stack-buffer-overflow in zend_calc_live_ranges in PHP N/A unrated 91734fc5795bc07dc718f9d884a014a90097e56f 12 Dec 2021
Heap-use-after-free vulnerability in php N/A high 6381a16f3f1d0ce5d260f90661a7026b8f05d074 10 Sep 2021
Heap-use-after-free in i_zval_ptr_dtor in PHP N/A high 24ff7eee3f04070d8ab1b31f57d17f0c840185bf 04 Sep 2021

Looking for another version, or everything Vulert holds for php?

All versions → Full vulnerability list →

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About php php-8.1.4RC1

Is php php-8.1.4RC1 vulnerable?

Yes. 11 vulnerabilities in the Vulert database cover php php-8.1.4RC1: 0 critical, 7 high, 1 medium and 0 low, plus 3 not yet rated. Each entry above names the fixed version to move to.

How do I monitor php for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the php version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.