CVE-2026-109618
Public on 2026-10-21
Modified on 2026-10-21
Description
PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).
Severity
See what this means
CVSS v3 Base Score
See breakdown
Affected Packages
| Platform | Package | Release Date | Advisory | Status |
|---|---|---|---|---|
| Amazon Linux 2 - Core | php | Pending Fix | ||
| Amazon Linux 2 - Php8.2 Extra | php | Pending Fix | ||
| Amazon Linux 2023 | php8.1 | No Fix Planned | ||
| Amazon Linux 2023 | php8.2 | Pending Fix | ||
| Amazon Linux 2023 | php8.3 | Pending Fix | ||
| Amazon Linux 2023 | php8.4 | Pending Fix | ||
| Amazon Linux 2023 | php8.5 | Pending Fix | ||
| Amazon Linux 2027 Preview | php8.5 | Pending Fix |
CVSS Scores
| Score Type | Score | Vector | |
|---|---|---|---|
| Amazon Linux | CVSSv3 | 8.1 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |