CVE-2025-14178
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2025
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Heap buffer overflow in array_merge()
In PHP versions:8.1.* before 8.1.34, 8.2.* before 8.2.30, 8.3.* before 8.3.29, 8.4.* before 8.4.16, 8.5.* before 8.5.1, a heap buffer overflow occurs in array_merge() when the total element count of packed arrays exceeds 32-bit limits or HT_MAX_SIZE, due to an integer overflow in the precomputation of element counts using zend_hash_num_elements(). This may lead to memory corruption or crashes and affect the integrity and availability of the target server.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
PHP
- Vendor
- PHP Group
- Product
- PHP
- Platforms
- Unknown
- Default status
affected- Package
- php
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 8.1.* | affected | semver | 8.1.34 | Unavailable | None listed |
| 8.2.* | affected | semver | 8.2.30 | Unavailable | None listed |
| 8.3.* | affected | semver | 8.3.29 | Unavailable | None listed |
| 8.4.* | affected | semver | 8.4.16 | Unavailable | None listed |
| 8.5.* | affected | semver | 8.5.1 | Unavailable | None listed |