Vulnerabilities · 197 days ago

php8.2 Update Closes DoS and Memory-Disclosure Flaws

Debian released a php8.2 security update for bookworm that fixes three vulnerabilities (CVE-2025-14177, CVE-2025-14178, CVE-2025-14180). The flaws can cause denial of service or memory disclosure. Fixed in php8.2 8.2.30-1~deb12u1.

CVE-2025-14180

NVD KEV

CVSS 7.5 HIGH: in PHP versions 8.1.* before 8.1.34, 8.2.* before 8.2.30, 8.3.* before 8.3.29, 8.4.* before 8.4.16, 8.5.* before… EPSS 0.7% (51st percentile).

CVE-2025-14177

NVD KEV

CVSS 7.5 HIGH: in PHP versions:8.1.* before 8.1.34, 8.2.* before 8.2.30, 8.3.* before 8.3.29, 8.4.* before 8.4.16, 8.5.* before… EPSS 0.5% (42nd percentile).

CVE-2025-14178

NVD KEV

CVSS 6.5 MEDIUM: in PHP versions:8.1.* before 8.1.34, 8.2.* before 8.2.30, 8.3.* before 8.3.29, 8.4.* before 8.4.16, 8.5.* before… EPSS 0.5% (38th percentile).

Timeline

Sources

1 source covering this story

Entities

Part of the PlainSec briefing for 2026-03-02

Editions

Related stories