Issues

• Crash on out of memory

  FeatureStatus: Needs Triage
  php/php-src#24584 · Filter by author DemiMarie opened on Oct 23, 2026
  2

• Frence

  php/php-src#24583 · Filter by author imane876 opened on Oct 23, 2026

• Memory leaks in ext/ffi parser when zend_ffi_finalize_type() bails out (pointer / function / argument / nested declarators)

  BugStatus: Needs Triage
  php/php-src#24582 · Filter by author matyapiro31 opened on Oct 23, 2026
  2

• Crash in FILTER_VALIDATE_INT when __toString() mutates the referenced options array

  BugStatus: Needs Triage
  php/php-src#24579 · Filter by author Meecoy opened on Oct 22, 2026

• Function JIT: wrong result (null) from a string-scanning loop with strcspn() after a comment-start byte

  BugCategory: JITExtension: opcacheStatus: Needs Triage
  php/php-src#24578 · Filter by author samad-aghaei opened on Oct 22, 2026

• OPcache: CE-cache flag on a shared interned class name becomes visible before its map_ptr offset; FPM child SIGSEGV on a cold cache

  php/php-src#24577 · Filter by author mago0 opened on Oct 22, 2026

• Session upload progress filename sanitization

  BugStatus: Needs Triage
  php/php-src#24574 · Filter by author sykeops opened on Oct 22, 2026

• Allocation-failure call sites still on zend_error_noreturn(E_ERROR) on master (zend_strtod.c "Balloc() failed", zend_multiply.h) — the EOL-7.4 minimal mitigation hardened these, master did not

  php/php-src#24563 · Filter by author srayuth089 opened on Oct 22, 2026

• Case-insensitive substr_compare, ksort, krsort are still locale-dependent

  BugStatus: Needs Triage
  php/php-src#24552 · Filter by author sirreal opened on Oct 22, 2026
  1

• I may have found a problem in PHP

  BugStatus: Needs Triage
  php/php-src#24549 · Filter by author nilogic opened on Oct 22, 2026

• Heap corruption in DOMXPath PHP callbacks during XSLT transformation (malloc(): unaligned tcache chunk detected)

  BugExtension: domStatus: Verified
  php/php-src#24545 · Filter by author frederikbosch opened on Oct 22, 2026
  2

• PHP Built-in Server Chunked Encoding Integer Overflow

  BugStatus: Needs Triage
  php/php-src#24536 · Filter by author bountyyfi opened on Oct 22, 2026

• Segfault in zend_try_early_bind when a parent class autoloads its cached child during linking (opcache)

  php/php-src#24534 · Filter by author wimwinterberg opened on Oct 22, 2026
  

• unserialize() teardown should reset freed var entries before running destructors

  BugStatus: Needs Triage
  php/php-src#24532 · Filter by author alexandre-daubois opened on Oct 22, 2026
  2

• null pointer dereference in streams.c

  BugStatus: Verified
  php/php-src#24531 · Filter by author YuanchengJiang opened on Oct 22, 2026
  

• Latent memory leak in ext/ffi:zend_ffi_make_pointer_type() when validate_vla fails

  BugStatus: Needs Triage
  php/php-src#24530 · Filter by author matyapiro31 opened on Oct 22, 2026
  3

• Class that uses a trait is not found when instantiated before its declaration

  BugStatus: Needs Triage
  php/php-src#24519 · Filter by author sybrew opened on Oct 21, 2026
  1

• Failed session_decode() still runs __wakeup() and __destruct()

  BugStatus: Needs Triage
  php/php-src#24518 · Filter by author sybrew opened on Oct 21, 2026
  2

• HTTP wrapper leaks Location buffer when an empty Location header is followed by another Location header

  BugStatus: Needs Triage
  php/php-src#24509 · Filter by author IzieStratt opened on Oct 21, 2026

• Time\Duration::__unserialize() accepts a "negative zero" payload.

  BugStatus: Needs Triage
  php/php-src#24505 · Filter by author azjezz opened on Oct 21, 2026
  2

• memory_hard_limit_percent reporting wrong default value when null

  BugStatus: Needs Triage
  php/php-src#24497 · Filter by author jack-worman opened on Oct 21, 2026

• 8.5.12 upload-progress handler destroys the whole session when a stored object has a property named __PHP_Incomplete_Class_Name/_Serialized/__PHP_Incomplete_Enum_Case (regression)

  BugStatus: Needs Triage
  php/php-src#24493 · Filter by author VijhnAustin opened on Oct 21, 2026

• sprintf()/pack()/bin2hex() _exit(137) at hard memory limit where 8.5.11 raised a catchable OOM (incomplete fallible-alloc conversion, 8.5.12/8.4.27)

  BugStatus: Needs Triage
  php/php-src#24492 · Filter by author VijhnAustin opened on Oct 21, 2026
  2

• Stream error_handler given as 'Class::method' turns the real exception into a TypeError

  php/php-src#24491 · Filter by author dev-null-undefined opened on Oct 21, 2026

• master: part of the mbstring bailout fix got lost in a merge

  php/php-src#24489 · Filter by author dev-null-undefined opened on Oct 21, 2026