Every CVE Search/ Get API key

OSV-2021-736

Stack-use-after-return in zend_fiber_suspend_context

No scoreFix available

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34013

Crash type: Stack-use-after-return READ 4
Crash state:
zend_fiber_suspend_context
zend_fiber_suspend
zim_Fiber_suspend

What each source reports

OSV No score

Stack-use-after-return in zend_fiber_suspend_context

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34013

Crash type: Stack-use-after-return READ 4
Crash state:
zend_fiber_suspend_context
zend_fiber_suspend
zim_Fiber_suspend
Record
OSV-2021-736
Updated
2026-11-02

Affected packages

Affected packages
PackageAffectedFixed
php
OSS-Fuzz
Listed versions, plus commit ranges
NEWSNEWS-cvs2svnPOST_64BIT_BRANCH_MERGEPOST_AST_MERGEPOST_NATIVE_TLS_MERGE
Show 45 moreShow less
POST_PHP7_EREG_MYSQL_REMOVALSPOST_PHP7_NSAPI_REMOVALPOST_PHP7_REMOVALSPOST_PHPNG_MERGEPRE_64BIT_BRANCH_MERGEPRE_AST_MERGEPRE_NATIVE_TLS_MERGEPRE_PHP7_EREG_MYSQL_REMOVALSPRE_PHP7_NSAPI_REMOVALPRE_PHP7_REMOVALSPRE_PHPNG_MERGEphp-5.3.11php-5.3.11RC1php-5.3.11RC2php-5.3.12php-5.3.13php-5.3.14php-5.3.14RC1php-5.3.14RC2php-5.3.15php-5.3.15RC1php-5.3.16php-5.3.17php-5.3.18php-5.3.18RC1php-5.3.19php-5.3.19RC1php-5.3.20php-5.3.20RC1php-5.3.21php-5.3.21RC1php-5.3.22php-5.3.22RC1php-5.3.22RC2php-5.3.23php-5.3.23RC1php-5.3.24php-5.3.24RC1php-5.3.25php-5.3.25RC1php-5.3.26php-5.3.26RC1php-5.3.27php-5.3.27RC1php-5.3.28
None known

History

History
RecordedChangedSources
first indexedOSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

OSV-2021-736 is a vulnerability with no CVSS score yet in php, published May 8, 2021. No source lists public exploit code. A source reports a fix.

References

This page doesn't list everything

Left out here: 407 versions. The JSON record has them.

MoveEnter Open