All issues

Search results

ext/dom: DOMDocument::adoptNode() leaves dangling wrappers under later siblings on 8.3 and 8.4

Bug

Extension: dom

Status: Verified

Status: Open.

#23353 In php/php-src;

· alexandre-daubois opened on Aug 18, 2026

ext/dom: UAF reading an attribute value node retained across DOMDocument::adoptNode()

Bug

Extension: dom

Status: Verified

Status: Open.

#23352 In php/php-src;

· alexandre-daubois opened on Aug 18, 2026

Saturation of ArrayObject iterator leads to UAF

Bug

Extension: standard

Status: Verified

Status: Open.

#23332 In php/php-src;

· alexandre-daubois opened on Aug 17, 2026