Issues

• Windows CLI: get_ps_title() passes bytes to GetConsoleTitleW() instead of characters, overflowing the 260-wchar_t buffer

  php/php-src#25009 · Filter by author apoc opened on Oct 28, 2026

• com_event_sink() / com_print_typeinfo($o, null, true) crash with NULL typelib for objects exposing IProvideClassInfo2

  php/php-src#25008 · Filter by author apoc opened on Oct 28, 2026
  

• Partial function application: named args in a constant expression cause out-of-bounds write in zp_compile()

  php/php-src#25007 · Filter by author apoc opened on Oct 28, 2026

• PDOStatement::getColumnMeta() reads out of bounds for out-of-range column index (pdo_firebird)

  php/php-src#25006 · Filter by author apoc opened on Oct 28, 2026
  

• ldap_exop_sync() crashes when the optional $response_data argument is omitted

  BugExtension: ldapStatus: Verified
  php/php-src#25005 · Filter by author apoc opened on Oct 28, 2026

• Parsing bugs in tar extraction (PharData)

  BugStatus: Needs Triage
  php/php-src#25003 · Filter by author haampie opened on Oct 28, 2026

• ext/session files handler: GC deletes a session file another request still holds locked

  php/php-src#25001 · Filter by author AsahiSoftWareEngineer opened on Oct 28, 2026

• pdo_sqlite: statement unusable after a failed execute() since 8.4.27 (SQLITE_MISUSE)

  BugExtension: pdo_sqliteStatus: Verified
  php/php-src#24990 · Filter by author francislavoie opened on Oct 28, 2026

• Use-after-free in GC when an exception is thrown

  BugCategory: EngineStatus: Verified
  php/php-src#24989 · Filter by author vi3tL0u1s opened on Oct 28, 2026
  

• JIT: crash in cleanup_live_vars when % by zero throws mid-expression (function JIT, optimization_level=0)

  php/php-src#24988 · Filter by author waroad opened on Oct 28, 2026

• request_parse_body() reentrancy can double-free PG(rfc1867_protected_variables)

  php/php-src#24802 · Filter by author ke0xa6 opened on Oct 27, 2026
  1

• JIT: SIGFPE in ir_fold MUL_OV constant folding for $x = -1; $x *= PHP_INT_MIN in a hot loop

  php/php-src#24801 · Filter by author waroad opened on Oct 27, 2026

• stack_limit_014.phpt segfaults on LINUX_X32_RELEASE nightly jobs since 2026-10-22

  php/php-src#24799 · Filter by author Truta446 opened on Oct 27, 2026

• PHP 8.5.12 tracing JIT produces incorrect sums when DivisionByZeroError is caught inside a loop

  Category: JITStatus: Verified
  php/php-src#24798 · Filter by author mitchellvanw opened on Oct 27, 2026
  

• PHP 8.6: Assignment-result writes compile but fail with invalid opcode

  BugStatus: Needs Triage
  php/php-src#24792 · Filter by author alwyn1024 opened on Oct 27, 2026

• Pending delayed OOM across zend_activate_modules() makes the uri RINIT fail and the worker exit(1) during request startup (regression in 8.5.12)

  BugStatus: Needs Triage
  php/php-src#24787 · Filter by author ihopenre-eng opened on Oct 27, 2026

• Light request fails with "Allowed memory size exhausted" on a huge allocation after heavy requests: cached chunks count towards memory_limit and are not released

  BugStatus: Needs Triage
  php/php-src#24777 · Filter by author rychnal opened on Oct 27, 2026

• ext/libxml: bailout during external entity loader destruction leaves stale FCC and can cause use-after-free

  BugExtension: libxmlStatus: Verified
  php/php-src#24763 · Filter by author thediex opened on Oct 26, 2026

• Bundled SQLite for Windows is missing math functions

  Extension: pdo_sqliteExtension: sqlite3OS: Windows
  php/php-src#24758 · Filter by author mvorisek opened on Oct 26, 2026
  3

  

• Test ext/standard/tests/ini_info/php_ini_loaded_file.phpt fails on Ubuntu Linux 22.04 LTS

  BugStatus: Needs Triage
  php/php-src#24752 · Filter by author juozaspo opened on Oct 26, 2026

• var_export does not handle exception correctly when retrieving object

  BugStatus: Needs Triage
  php/php-src#24743 · Filter by author Sjord opened on Oct 26, 2026

• DateTime::setTime() in the repeated hour of Europe/Dublin moves to the later occurrence (an hour ahead)

  php/php-src#24735 · Filter by author zoispag opened on Oct 26, 2026

• Assertion failure in zend_objects_store_del() when a bailout interrupts zend_fcc_dtor() in header_register_callback()

  BugStatus: Needs Triage
  php/php-src#24731 · Filter by author IzaiahSun opened on Oct 26, 2026

• extract() with EXTR_REFS: use-after-free still present in modes other than EXTR_OVERWRITE (follow-up to #18209)

  BugStatus: Needs Triage
  php/php-src#24730 · Filter by author IzaiahSun opened on Oct 26, 2026
  1

  

• Use-after-free in ReflectionClass::setStaticPropertyValue() when the old value's destructor unbinds the property

  BugStatus: Needs Triage
  php/php-src#24729 · Filter by author IzaiahSun opened on Oct 26, 2026