Skip to content

XFEDI

Conversation

ActivityPub

Alesandro Ortiz 🇵🇷🏳️‍🌈@[email protected]

#PHP security advisories with technical details:

https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w

https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp

GitHubRCE via OOM corruption## Summary PHP uses `longjmp()` for out-of-memory (OOM) errors to exit the current context and abort handling of the request. In some contexts, request memory is temporarily reachable before it ...

↩ Reply ♡ 0 · ↻ 0 ↗ Original

Oct 21, 2026 · 13:54 UTC

Replies

Alesandro Ortiz 🇵🇷🏳️‍🌈@[email protected]

↳ In reply to a post

WSJ article with some details about the discovery of the PHP security vulnerability: https://www.wsj.com/tech/cybersecurity/ai-just-found-a-bug-that-puts-up-to-70-of-the-worlds-websites-at-risk-fd0902ea?st=tBLRBh&reflink=desktopwebshare_permalink (paywall)

↩ Reply ♡ 0 · ↻ 0 ↗ Original