Issues

• JIT: crash in cleanup_live_vars when % by zero throws mid-expression (function JIT, optimization_level=0)

  php/php-src#24988 · Filter by author waroad opened on Oct 28, 2026

• request_parse_body() reentrancy can double-free PG(rfc1867_protected_variables)

  php/php-src#24802 · Filter by author ke0xa6 opened on Oct 27, 2026
  1

• JIT: SIGFPE in ir_fold MUL_OV constant folding for $x = -1; $x *= PHP_INT_MIN in a hot loop

  php/php-src#24801 · Filter by author waroad opened on Oct 27, 2026

• stack_limit_014.phpt segfaults on LINUX_X32_RELEASE nightly jobs since 2026-10-22

  php/php-src#24799 · Filter by author Truta446 opened on Oct 27, 2026

• PHP 8.5.12 tracing JIT produces incorrect sums when DivisionByZeroError is caught inside a loop

  php/php-src#24798 · Filter by author mitchellvanw opened on Oct 27, 2026

• PHP 8.6: Assignment-result writes compile but fail with invalid opcode

  BugStatus: Needs Triage
  php/php-src#24792 · Filter by author alwyn1024 opened on Oct 27, 2026

• Pending delayed OOM across zend_activate_modules() makes the uri RINIT fail and the worker exit(1) during request startup (regression in 8.5.12)

  BugStatus: Needs Triage
  php/php-src#24787 · Filter by author ihopenre-eng opened on Oct 27, 2026

• openssl_pkcs7_read() / openssl_cms_read(): CRLs overwrite certificates in the output array

  BugStatus: Needs Triage
  php/php-src#24784 · Filter by author adapik opened on Oct 27, 2026

• Light request fails with "Allowed memory size exhausted" on a huge allocation after heavy requests: cached chunks count towards memory_limit and are not released

  BugStatus: Needs Triage
  php/php-src#24777 · Filter by author rychnal opened on Oct 27, 2026

• ext/mbstring: mb_regex_substitute() reads past the replacement string's end on a truncated trailing multibyte lead byte

  php/php-src#24769 · Filter by author kunwaratulhax0r opened on Oct 27, 2026
  3

• ext/libxml: bailout during external entity loader destruction leaves stale FCC and can cause use-after-free

  BugExtension: libxmlStatus: Verified
  php/php-src#24763 · Filter by author thediex opened on Oct 26, 2026

• Bundled SQLite for Windows is missing math functions

  Extension: pdo_sqliteExtension: sqlite3OS: Windows
  php/php-src#24758 · Filter by author mvorisek opened on Oct 26, 2026
  2

  

• Test ext/standard/tests/ini_info/php_ini_loaded_file.phpt fails on Ubuntu Linux 22.04 LTS

  BugStatus: Needs Triage
  php/php-src#24752 · Filter by author juozaspo opened on Oct 26, 2026

• var_export does not handle exception correctly when retrieving object

  BugStatus: Needs Triage
  php/php-src#24743 · Filter by author Sjord opened on Oct 26, 2026

• DateTime::setTime() in the repeated hour of Europe/Dublin moves to the later occurrence (an hour ahead)

  php/php-src#24735 · Filter by author zoispag opened on Oct 26, 2026

• Assertion failure in zend_objects_store_del() when a bailout interrupts zend_fcc_dtor() in header_register_callback()

  BugStatus: Needs Triage
  php/php-src#24731 · Filter by author IzaiahSun opened on Oct 26, 2026

• extract() with EXTR_REFS: use-after-free still present in modes other than EXTR_OVERWRITE (follow-up to #18209)

  BugStatus: Needs Triage
  php/php-src#24730 · Filter by author IzaiahSun opened on Oct 26, 2026
  1

  

• Use-after-free in ReflectionClass::setStaticPropertyValue() when the old value's destructor unbinds the property

  BugStatus: Needs Triage
  php/php-src#24729 · Filter by author IzaiahSun opened on Oct 26, 2026

• Memory Tagging (MTE/MTT) support

  Category: EngineFeatureStatus: Verified
  php/php-src#24716 · Filter by author barisyild opened on Oct 26, 2026
  2

• Assertion `!zend_lazy_object_must_init(object)' failed in Zend/zend_lazy_objects.c

  BugStatus: Needs Triage
  php/php-src#24715 · Filter by author YuanchengJiang opened on Oct 26, 2026

• Use-after-free in foreach by reference when destructor modifies the loop variable

  BugStatus: Needs Triage
  php/php-src#24712 · Filter by author vi3tL0u1s opened on Oct 26, 2026

• Assertion failure in binary operators when an error handler unsets an operand

  BugStatus: Needs Triage
  php/php-src#24708 · Filter by author vi3tL0u1s opened on Oct 26, 2026

• Use-after-free in opendir() when a user wrapper unregisters itself

  BugStatus: Needs Triage
  php/php-src#24707 · Filter by author vi3tL0u1s opened on Oct 26, 2026

• Allow Closure interface

  FeatureStatus: Requires RFC
  php/php-src#24703 · Filter by author mvorisek opened on Oct 25, 2026

• opcache.preload: use-after-free on class-typed trait constants (missing type addref in zend_do_traits_constant_binding)

  php/php-src#24701 · Filter by author sanklamm opened on Oct 25, 2026