Issues

• Function JIT: after $prev = $x; $x -= $step; an internal call makes $prev read the new $x (int|float $step, x86-64 Linux)

  php/php-src#25169 · Filter by author Pal9yni4bi opened on Nov 2, 2026

• Tracing JIT: infinite loop once opcache.jit_buffer_size is exhausted while compiling side traces

  php/php-src#25165 · Filter by author waroad opened on Nov 2, 2026

• JIT: loop calling a user function runs once or never ends with opcache.jit=function on while ($i++ < 5) leaf();

  php/php-src#25164 · Filter by author waroad opened on Nov 2, 2026

• bug: strtotime \x00, bypass the handling of ""

  BugStatus: Needs Triage
  php/php-src#25150 · Filter by author HackingRepo opened on Nov 2, 2026

• lex_scan() leaks a zend_string (32 bytes) for every nullable type name — LeakSanitizer

  BugStatus: Needs Triage
  php/php-src#25149 · Filter by author idan-vaknin opened on Nov 2, 2026

• Blocking socket fread() reports timed_out on Windows after returning buffered data

  BugStatus: Needs Triage
  php/php-src#25148 · Filter by author jack-worman opened on Nov 2, 2026

• bug: mb_parse_str null byte ends the parsing, not handled literally

  BugStatus: Needs Triage
  php/php-src#25147 · Filter by author HackingRepo opened on Nov 2, 2026

• SNMP accepts malformed remote ports

  php/php-src#25137 · Filter by author somethingwithproof opened on Nov 1, 2026
  1

• CLI build in server crashes with repeated headers and -DZEND_RC_DEBUG=1

  BugSAPI: cli_serverStatus: Verified
  Bug

  php/php-src#25131 · Filter by author DanielEScherzer opened on Nov 1, 2026
  2

• phar: ext/opcache's is_phar_file() must perform the same phar_has_marker_in_filename() check as ext/phar does

  BugStatus: Needs Triage
  php/php-src#25130 · Filter by author ndossche opened on Nov 1, 2026

• ext/phar: Phar::webPhar() 301 redirect keeps PATH_INFO on the CGI SAPIs when a rewrite callback routes to the index

  php/php-src#25112 · Filter by author dhrupo opened on Oct 31, 2026

• json_encode() serializes an uninitialized backed property with a setter hook as null

  php/php-src#25108 · Filter by author JoaoMarcos44 opened on Oct 31, 2026

• array_unshift() skips unvisited values in foreach by reference when the array has holes

  php/php-src#25107 · Filter by author JoaoMarcos44 opened on Oct 31, 2026

• PDO SQLite returns a phantom null row when an unread statement is re-executed with no results

  php/php-src#25106 · Filter by author JoaoMarcos44 opened on Oct 31, 2026

• ext/curl: build_mime_structure_from_hash(): hash iterator dangling after __toString-triggered rehash

  BugStatus: Needs Triage
  php/php-src#25096 · Filter by author cxxz16 opened on Oct 31, 2026

• ext/soap: get_doc_function(): missing NULL check when request Body has fewer elements than declared WSDL parameters

  BugStatus: Needs Triage
  php/php-src#25094 · Filter by author cxxz16 opened on Oct 31, 2026

• [ext/openssl] SNI server contexts do not inherit ciphers or ALPN policy

  php/php-src#25088 · Filter by author yetingli opened on Oct 31, 2026

• php-fpm workers' log get silenced with config catch_workers_output = yes and error_log = syslog

  BugStatus: Needs Triage
  php/php-src#25077 · Filter by author n0099 opened on Oct 31, 2026
  1

• Nested unserialize() can expose an outer object while its __unserialize() data is still being parsed

  php/php-src#25056 · Filter by author bukka opened on Oct 30, 2026

• Phar truncates entries of 4 GiB or more without error/warning

  BugStatus: Needs Triage
  php/php-src#25053 · Filter by author haampie opened on Oct 30, 2026

• finfo detects TrueType fonts as application/octet-stream since libmagic 5.48

  php/php-src#25051 · Filter by author dhrupo opened on Oct 30, 2026 · PHP 8.6
  5

  

• Function JIT: "ENTRY 2 (block 15 start 68) - live var 66" for a namespaced method that passes a recursive self:: call to an unqualified function

  BugCategory: JITStatus: Verified
  php/php-src#25037 · Filter by author rhift opened on Oct 29, 2026
  1

  

• mb_strpos()/mb_strrpos(): the out-of-bounds read fixed in 8.4.27 (GH-23106) is still present in PHP-8.3 and PHP-8.2

  BugStatus: Needs Triage
  php/php-src#25025 · Filter by author aygydiewr221 opened on Oct 29, 2026
  4

• mb_ereg_replace(): the out-of-bounds read fixed in 8.4.26 is still present in PHP-8.3 and PHP-8.2

  BugStatus: Needs Triage
  php/php-src#25024 · Filter by author aygydiewr221 opened on Oct 29, 2026

• Parsing bugs in tar extraction (PharData)

  BugStatus: Needs Triage
  php/php-src#25003 · Filter by author haampie opened on Oct 28, 2026