Issues

• Build 8.3.36- zlib.lib could not be found because zlib 1.3.2 cmake build does not emit it

  BugStatus: Needs Triage
  php/php-src#24533 · Filter by author ncook-hxgn opened on Oct 22, 2026

• unserialize() teardown should reset freed var entries before running destructors

  BugStatus: Needs Triage
  php/php-src#24532 · Filter by author alexandre-daubois opened on Oct 22, 2026
  1

• null pointer dereference in streams.c

  BugStatus: Verified
  php/php-src#24531 · Filter by author YuanchengJiang opened on Oct 22, 2026
  

• Latent memory leak in ext/ffi:zend_ffi_make_pointer_type() when validate_vla fails

  BugStatus: Needs Triage
  php/php-src#24530 · Filter by author matyapiro31 opened on Oct 22, 2026

• uaf in zend_test_compile_to_ast() on parse error

  BugStatus: Needs Triage
  php/php-src#24523 · Filter by author peter-pe opened on Oct 22, 2026
  1

• Class that uses a trait is not found when instantiated before its declaration

  BugStatus: Needs Triage
  php/php-src#24519 · Filter by author sybrew opened on Oct 21, 2026

• Failed session_decode() still runs __wakeup() and __destruct()

  BugStatus: Needs Triage
  php/php-src#24518 · Filter by author sybrew opened on Oct 21, 2026

• HTTP wrapper leaks Location buffer when an empty Location header is followed by another Location header

  BugStatus: Needs Triage
  php/php-src#24509 · Filter by author IzieStratt opened on Oct 21, 2026

• HTTP wrapper leaks dechunk filter when header parsing fails after Transfer-Encoding: chunked

  BugStatus: Needs Triage
  php/php-src#24508 · Filter by author IzieStratt opened on Oct 21, 2026

• stream_select() leaks a stream-error operation level on its FD_SETSIZE failure path

  BugStatus: Needs Triage
  php/php-src#24506 · Filter by author azjezz opened on Oct 21, 2026

• Time\Duration::__unserialize() accepts a "negative zero" payload.

  BugStatus: Needs Triage
  php/php-src#24505 · Filter by author azjezz opened on Oct 21, 2026
  1

• memory_hard_limit_percent reporting wrong default value when null

  BugStatus: Needs Triage
  php/php-src#24497 · Filter by author jack-worman opened on Oct 21, 2026

• 8.5.12 upload-progress handler destroys the whole session when a stored object has a property named __PHP_Incomplete_Class_Name/_Serialized/__PHP_Incomplete_Enum_Case (regression)

  BugStatus: Needs Triage
  php/php-src#24493 · Filter by author VijhnAustin opened on Oct 21, 2026

• sprintf()/pack()/bin2hex() _exit(137) at hard memory limit where 8.5.11 raised a catchable OOM (incomplete fallible-alloc conversion, 8.5.12/8.4.27)

  BugStatus: Needs Triage
  php/php-src#24492 · Filter by author VijhnAustin opened on Oct 21, 2026
  2

• Stream error_handler given as 'Class::method' turns the real exception into a TypeError

  php/php-src#24491 · Filter by author dev-null-undefined opened on Oct 21, 2026

• pdo_pgsql: prepare() hangs on a query containing a NUL byte

  php/php-src#24490 · Filter by author dev-null-undefined opened on Oct 21, 2026
  1

• master: part of the mbstring bailout fix got lost in a merge

  php/php-src#24489 · Filter by author dev-null-undefined opened on Oct 21, 2026

• 8.4.27 / 8.5.12 regression: GC double-frees the SimpleXMLElement properties table (zend_mm_heap corrupted), introduced by the GH-24050 fix

  BugExtension: simplexmlStatus: Verified
  php/php-src#24488 · Filter by author evankford opened on Oct 21, 2026
  7

  

• Use-after-free in var_destroy() during unserialize() re-entrancy allows __destruct to read a freed var_entries chunk

  BugStatus: Needs Triage
  php/php-src#24481 · Filter by author SleepTheGod opened on Oct 21, 2026
  2

• finally block runs twice when a VM interrupt throws as it returns to "return" in the try block

  BugStatus: Verified
  php/php-src#24480 · Filter by author cscott opened on Oct 21, 2026
  

• [pdo_odbc] Buffer overflow / CWB0111 on SQL_BIT columns with IBM i Access ODBC Driver

  BugStatus: Needs Triage
  php/php-src#24474 · Filter by author boivinj opened on Oct 21, 2026
  2

• Tracing JIT: float temporary kept only in a register is marked type_only in a side trace exit, VM then reads a stale value

  BugCategory: JIT
  php/php-src#24471 · Filter by author mollenthiel opened on Oct 21, 2026

• convert.quoted-printable-encode drops or duplicates a CR at the end of a write

  php/php-src#24462 · Filter by author sebxt opened on Oct 20, 2026

• quoted_printable_encode does not encode trailing space

  BugStatus: Needs Triage
  php/php-src#24458 · Filter by author Sjord opened on Oct 20, 2026

• imagewebp() returns true when encoding fails

  php/php-src#24457 · Filter by author lacatoire opened on Oct 20, 2026