PHP Updates Released For Two Critical Code Execution Vulnerabilities
PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 released to fix two critical vulnerabilities allowing remote code execution.
Intelligence analysis by Qwen 2.5 (3B)
PHP has released updates to fix two critical vulnerabilities that can lead to remote code execution. Server administrators are advised to update immediately.
PHP is a programming language that can be used to make websites. The company that makes PHP found two big problems that could let bad people make your website do bad things. They fixed these problems and told people to update their PHP to stay safe.
Analysis
{"heading":"Vulnerability Details","subheading":"Out-of-Memory Handling","content":["The first vulnerability involves out-of-memory handling, which can cause PHP to corrupt memory and potentially execute arbitrary code.","The second vulnerability is related to stale global state surviving after its backing memory has been freed, allowing for remote code execution."]}
Key points
- PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 have been released to fix two critical vulnerabilities.
- The vulnerabilities allow for remote code execution, which can be exploited by bad people.
- Server administrators are advised to update immediately to protect their systems.
With the updates, the risk of bad people making websites do bad things is lower, but it's still important to keep your PHP up to date.
If people don't update their PHP, they could still be at risk from these vulnerabilities.
