OSV-2021-1199
Heap-use-after-free in i_zval_ptr_dtor
No scoreFix available
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38001
Crash type: Heap-use-after-free READ 1
Crash state:
i_zval_ptr_dtor
concat_function
zend_binary_op
What each source reports
OSV No score
Heap-use-after-free in i_zval_ptr_dtor
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38001
Crash type: Heap-use-after-free READ 1
Crash state:
i_zval_ptr_dtor
concat_function
zend_binary_op
- Record
OSV-2021-1199- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
phpOSS-Fuzz |
Listed versions, plus commit ranges php-8.1.0php-8.1.2RC1php-8.1.3php-8.1.4RC1php-8.1.7RC1 Show 45 moreShow lessphp-8.2.34php-8.2.33php-8.2.32php-8.2.31php-8.1.34php-8.2.30php-8.1.33php-8.2.29php-8.1.32php-8.2.28php-8.2.27php-8.2.27RC1php-8.2.26php-8.1.31php-8.2.26RC1php-8.2.25php-8.2.25RC1php-8.1.30php-8.2.24php-8.2.24RC1php-8.2.23php-8.2.23RC1php-8.2.22php-8.2.22RC1php-8.2.21php-8.2.21RC1php-8.1.29php-8.2.20php-8.2.20RC1php-8.2.19php-8.2.19RC1php-8.1.28php-8.2.18php-8.2.18RC1php-8.2.17php-8.2.17RC2php-8.2.17RC1php-8.2.16php-8.2.16RC1php-8.2.15php-8.2.15RC1php-8.2.14php-8.1.27php-8.2.14RC1php-8.1.27RC1 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
OSV-2021-1199 is a vulnerability with no CVSS score yet in php, published September 4, 2021. No source lists public exploit code. A source reports a fix.
References
This page doesn't list everything
Left out here: 160 versions. The JSON record has them.