cve.bz

CVE-2022-31625

8.1 highEPSS 3.8%

High (8.1). EPSS 3.8% chance of exploitation in the next 30 days.

In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when using Postgres database extension, supplying invalid parameters to the parametrized query may lead to PHP attempting to free memory using uninitialized data as pointers. This could lead to RCE vulnerability or denial of service.

Severity

CVSS 3.1

8.1 high
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
3.8% chance of exploitation in the next 30 days; higher than 89% of CVEs (scores of 2026-10-31)
CWEs
CWE-763, CWE-590, CWE-824
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON