php:8.2/php-ffi

Direct Vulnerabilities

Known vulnerabilities in the php:8.2/php-ffi package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
H Use After Free	<0:8.2.35-1.module+el8.10.0+25110+f67151d2
H Use After Free	<0:8.2.35-1.module+el8.10.0+25110+f67151d2
M Improper Certificate Validation	*
M Integer Overflow or Wraparound	*
M Out-of-bounds Read	*
M Out-of-bounds Read	*
M Heap-based Buffer Overflow	*
M Improper Verification of Source of a Communication Channel	*
M Information Exposure	*
H Uncontrolled Recursion	<0:8.2.35-1.module+el8.10.0+25110+f67151d2
M Integer Overflow or Wraparound	*
L Heap-based Buffer Overflow	*
M Improper Handling of File Names	*
L Heap-based Buffer Overflow	<0:8.2.32-1.module+el8.10.0+24514+5bfab8b6
H Unchecked Input for Loop Condition	<0:8.2.33-1.module+el8.10.0+24627+75f19366
H SQL Injection	<0:8.2.33-1.module+el8.10.0+24627+75f19366
H Expired Pointer Dereference	<0:8.2.31-1.module+el8.10.0+24323+abc2b0db
H Expired Pointer Dereference	<0:8.2.31-1.module+el8.10.0+24323+abc2b0db
M NULL Pointer Dereference	*
H Integer Overflow or Wraparound	<0:8.2.31-1.module+el8.10.0+24323+abc2b0db
H NULL Pointer Dereference	<0:8.2.31-1.module+el8.10.0+24323+abc2b0db
H Cross-site Scripting (XSS)	<0:8.2.31-1.module+el8.10.0+24323+abc2b0db
H Numeric Range Comparison Without Minimum Check	<0:8.2.31-1.module+el8.10.0+24323+abc2b0db
H Out-of-bounds Write	<0:8.2.30-1.module+el8.10.0+23848+33d54484
H Out-of-bounds Read	<0:8.2.30-1.module+el8.10.0+23848+33d54484
H NULL Pointer Dereference	<0:8.2.30-1.module+el8.10.0+23848+33d54484
H Server-Side Request Forgery (SSRF)	<0:8.2.30-1.module+el8.10.0+23848+33d54484
H NULL Pointer Dereference	<0:8.2.30-1.module+el8.10.0+23848+33d54484
H NULL Pointer Dereference	<0:8.2.30-1.module+el8.10.0+23848+33d54484
M Improper Input Validation	<0:8.2.28-1.module+el8.10.0+23472+dcd7a400
M Improper Input Validation	<0:8.2.28-1.module+el8.10.0+23472+dcd7a400
M Improper Input Validation	<0:8.2.28-1.module+el8.10.0+23472+dcd7a400
M Improper Input Validation	<0:8.2.28-1.module+el8.10.0+23472+dcd7a400
M Incorrect Calculation of Buffer Size	<0:8.2.28-1.module+el8.10.0+23472+dcd7a400
M Out-of-bounds Read	<0:8.2.28-1.module+el8.10.0+23472+dcd7a400
M Improper Input Validation	<0:8.2.28-1.module+el8.10.0+23472+dcd7a400
M Heap-based Buffer Overflow	<0:8.2.28-1.module+el8.10.0+23472+dcd7a400
M Improper Output Neutralization for Logs	<0:8.2.25-1.module+el8.10.0+22478+9eb07224
M Insufficient Granularity of Access Control	<0:8.2.25-1.module+el8.10.0+22478+9eb07224
M Improper Validation of Syntactic Correctness of Input	<0:8.2.25-1.module+el8.10.0+22478+9eb07224
M Improper Input Validation	<0:8.2.25-1.module+el8.10.0+22478+9eb07224
M Covert Timing Channel	*
M Null Byte Interaction Error (Poison Null Byte)	<0:8.2.25-1.module+el8.10.0+22478+9eb07224
M Improper Input Validation	<0:8.2.25-1.module+el8.10.0+22478+9eb07224

Vulnerability

Vulnerable Version

Use After Free

<0:8.2.35-1.module+el8.10.0+25110+f67151d2