CVE-2026-109618 RCE via OOM corruption

Produsentens beskrivelse (engelsk)

PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).

Referansedata

Produsent

PHP Group

Berørte produkter

• PHP

CVSS 4.0

9.2 (CRITICAL)

Vektor

CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Type svakhet

CWE-416: Use After Free

Publisert

21. oktober 2026

I KEV-katalogen siden

26. oktober 2026

Frist amerikanske føderale etater

29. oktober 2026

Offisielle kilder

• CVE.org
• NVD
• CISA KEV
• Produsentens advisory

← Alle sårbarheter