{"id":"OSV-2021-1780","aliases":[],"status":"published","title":"Heap-use-after-free in zend_jit_fetch_dim_r_helper","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43055\n\n```\nCrash type: Heap-use-after-free READ 4\nCrash state:\nzend_jit_fetch_dim_r_helper\nzero\nzend_execute\n```","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2021-12-29T00:00:46.05698Z","modified":"2023-02-24T03:23:57Z","affected":[{"source":"osv","ecosystem":"OSS-Fuzz","package":"php","ranges":[{"type":"GIT","events":[{"introduced":"faa143ca1b11f09ef15f1cab8ed460dc1c59898c"},{"introduced":"75b2973974414fb52a19c0466c8f2afc2081eb49"},{"fixed":"9362d6f5f08bf5f86fc30cf12433e1634f746c4d"}]}],"versions":["php-8.1.2RC1","php-8.1.3","php-8.1.4RC1","php-8.1.7RC1"]}],"references":[{"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43055","tags":["report"]}],"sources":{"osv":[{"id":"OSV-2021-1780","title":"Heap-use-after-free in zend_jit_fetch_dim_r_helper","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43055\n\n```\nCrash type: Heap-use-after-free READ 4\nCrash state:\nzend_jit_fetch_dim_r_helper\nzero\nzend_execute\n```\n","status":"published","published":"2021-12-29T00:00:46.05698Z","modified":"2023-02-24T03:23:57.223891Z","updated_at":"2026-11-02T15:52:49.04248Z"}]}}