Issues

• Opcache DFA: $x = $x - 1 on a null ?int is rewritten to PRE_DEC, giving NULL (verifier failure in checking build)

  php/php-src#25061 · Filter by author waroad opened on Oct 30, 2026

• Nested unserialize() can expose an outer object while its __unserialize() data is still being parsed

  php/php-src#25056 · Filter by author bukka opened on Oct 30, 2026

• Phar truncates entries of 4 GiB or more without error/warning

  BugStatus: Needs Triage
  php/php-src#25053 · Filter by author haampie opened on Oct 30, 2026

• finfo detects TrueType fonts as application/octet-stream since libmagic 5.48

  php/php-src#25051 · Filter by author dhrupo opened on Oct 30, 2026 · PHP 8.6
  5

  

• Function JIT: "ENTRY 2 (block 15 start 68) - live var 66" for a namespaced method that passes a recursive self:: call to an unqualified function

  BugCategory: JITStatus: Verified
  php/php-src#25037 · Filter by author rhift opened on Oct 29, 2026
  

• mb_strpos()/mb_strrpos(): the out-of-bounds read fixed in 8.4.27 (GH-23106) is still present in PHP-8.3 and PHP-8.2

  BugStatus: Needs Triage
  php/php-src#25025 · Filter by author aygydiewr221 opened on Oct 29, 2026

• mb_ereg_replace(): the out-of-bounds read fixed in 8.4.26 is still present in PHP-8.3 and PHP-8.2

  BugStatus: Needs Triage
  php/php-src#25024 · Filter by author aygydiewr221 opened on Oct 29, 2026

• SQLite createFunction corrupts large integers

  BugStatus: Needs Triage
  php/php-src#25021 · Filter by author mvorisek opened on Oct 28, 2026
  1

• Windows CLI: get_ps_title() passes bytes to GetConsoleTitleW() instead of characters, overflowing the 260-wchar_t buffer

  php/php-src#25009 · Filter by author apoc opened on Oct 28, 2026

• com_event_sink() / com_print_typeinfo($o, null, true) crash with NULL typelib for objects exposing IProvideClassInfo2

  BugExtension: com_dotnetStatus: Verified
  php/php-src#25008 · Filter by author apoc opened on Oct 28, 2026
  

• Parsing bugs in tar extraction (PharData)

  BugStatus: Needs Triage
  php/php-src#25003 · Filter by author haampie opened on Oct 28, 2026

• ext/session files handler: GC deletes a session file another request still holds locked

  php/php-src#25001 · Filter by author AsahiSoftWareEngineer opened on Oct 28, 2026

• pdo_sqlite: statement unusable after a failed execute() since 8.4.27 (SQLITE_MISUSE)

  BugExtension: pdo_sqliteStatus: Verified
  php/php-src#24990 · Filter by author francislavoie opened on Oct 28, 2026

• JIT: crash in cleanup_live_vars when % by zero throws mid-expression (function JIT, optimization_level=0)

  BugCategory: JITExtension: opcacheStatus: Verified
  php/php-src#24988 · Filter by author waroad opened on Oct 28, 2026
  

• request_parse_body() reentrancy can double-free PG(rfc1867_protected_variables)

  php/php-src#24802 · Filter by author ke0xa6 opened on Oct 27, 2026
  1

• JIT: SIGFPE in ir_fold MUL_OV constant folding for $x = -1; $x *= PHP_INT_MIN in a hot loop

  php/php-src#24801 · Filter by author waroad opened on Oct 27, 2026
  1

• stack_limit_014.phpt segfaults on LINUX_X32_RELEASE nightly jobs since 2026-10-22

  php/php-src#24799 · Filter by author Truta446 opened on Oct 27, 2026

• PHP 8.5.12 tracing JIT produces incorrect sums when DivisionByZeroError is caught inside a loop

  Category: JITStatus: Verified
  php/php-src#24798 · Filter by author mitchellvanw opened on Oct 27, 2026
  

• PHP 8.6: Assignment-result writes compile but fail with invalid opcode

  BugStatus: Needs Triage
  php/php-src#24792 · Filter by author alwyn1024 opened on Oct 27, 2026

• Pending delayed OOM across zend_activate_modules() makes the uri RINIT fail and the worker exit(1) during request startup (regression in 8.5.12)

  BugStatus: Needs Triage
  php/php-src#24787 · Filter by author ihopenre-eng opened on Oct 27, 2026

• Light request fails with "Allowed memory size exhausted" on a huge allocation after heavy requests: cached chunks count towards memory_limit and are not released

  BugStatus: Needs Triage
  php/php-src#24777 · Filter by author rychnal opened on Oct 27, 2026

• ext/libxml: bailout during external entity loader destruction leaves stale FCC and can cause use-after-free

  BugExtension: libxmlStatus: Verified
  php/php-src#24763 · Filter by author thediex opened on Oct 26, 2026

• Test ext/standard/tests/ini_info/php_ini_loaded_file.phpt fails on Ubuntu Linux 22.04 LTS

  BugStatus: Needs Triage
  php/php-src#24752 · Filter by author juozaspo opened on Oct 26, 2026

• var_export does not handle exception correctly when retrieving object

  BugStatus: Needs Triage
  php/php-src#24743 · Filter by author Sjord opened on Oct 26, 2026

• DateTime::setTime() in the repeated hour of Europe/Dublin moves to the later occurrence (an hour ahead)

  php/php-src#24735 · Filter by author zoispag opened on Oct 26, 2026