High severity8.1NVD Advisory· Published Jun 16, 2022· Updated Jun 17, 2026

CVE-2022-31625

Description

In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when using Postgres database extension, supplying invalid parameters to the parametrized query may lead to PHP attempting to free memory using uninitialized data as pointers. This could lead to RCE vulnerability or denial of service.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

PHP/PHPllm-fuzzy2 versions
>=7.4.0,<7.4.30;>=8.0.0,<8.0.20;>=8.1.0,<8.1.7+ 1 more
- (no CPE)range: >=7.4.0,<7.4.30;>=8.0.0,<8.0.20;>=8.1.0,<8.1.7
- (no CPE)range: 7.4.X
osv-coords92 versions
pkg:bitnami/libphp pkg:bitnami/php pkg:bitnami/php-min pkg:rpm/almalinux/apcu-panel pkg:rpm/almalinux/libzip pkg:rpm/almalinux/libzip-devel pkg:rpm/almalinux/libzip-tools pkg:rpm/almalinux/php pkg:rpm/almalinux/php-bcmath pkg:rpm/almalinux/php-cli pkg:rpm/almalinux/php-common pkg:rpm/almalinux/php-dba pkg:rpm/almalinux/php-dbg pkg:rpm/almalinux/php-devel pkg:rpm/almalinux/php-embedded pkg:rpm/almalinux/php-enchant pkg:rpm/almalinux/php-ffi pkg:rpm/almalinux/php-fpm pkg:rpm/almalinux/php-gd pkg:rpm/almalinux/php-gmp pkg:rpm/almalinux/php-intl pkg:rpm/almalinux/php-json pkg:rpm/almalinux/php-ldap pkg:rpm/almalinux/php-mbstring pkg:rpm/almalinux/php-mysqlnd pkg:rpm/almalinux/php-odbc pkg:rpm/almalinux/php-opcache pkg:rpm/almalinux/php-pdo pkg:rpm/almalinux/php-pear pkg:rpm/almalinux/php-pecl-apcu pkg:rpm/almalinux/php-pecl-apcu-devel pkg:rpm/almalinux/php-pecl-rrd pkg:rpm/almalinux/php-pecl-xdebug pkg:rpm/almalinux/php-pecl-xdebug3 pkg:rpm/almalinux/php-pecl-zip pkg:rpm/almalinux/php-pgsql pkg:rpm/almalinux/php-process pkg:rpm/almalinux/php-snmp pkg:rpm/almalinux/php-soap pkg:rpm/almalinux/php-xml pkg:rpm/almalinux/php-xmlrpc pkg:rpm/opensuse/apache2-mod_php7&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/apache2-mod_php8&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/php7&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/php7&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/php7-embed&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/php7-fastcgi&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/php7-fpm&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/php7-test&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/php7-test&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/php8&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/php8&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/php8-embed&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/php8-fastcgi&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/php8-fpm&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/php8-test&distro=openSUSE%20Leap%2015.4 pkg:rpm/suse/apache2-mod_php7&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Legacy%2015%20SP4 pkg:rpm/suse/apache2-mod_php8&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Web%20and%20Scripting%2015%20SP4 pkg:rpm/suse/php72&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Web%20and%20Scripting%2012 pkg:rpm/suse/php72&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5 pkg:rpm/suse/php74&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Web%20and%20Scripting%2012 pkg:rpm/suse/php74&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5 pkg:rpm/suse/php7&distro=SUSE%20Enterprise%20Storage%206 pkg:rpm/suse/php7&distro=SUSE%20Enterprise%20Storage%207 pkg:rpm/suse/php7&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-ESPOS pkg:rpm/suse/php7&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSS pkg:rpm/suse/php7&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-ESPOS pkg:rpm/suse/php7&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS pkg:rpm/suse/php7&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOS pkg:rpm/suse/php7&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSS pkg:rpm/suse/php7&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Legacy%2015%20SP4 pkg:rpm/suse/php7&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP3 pkg:rpm/suse/php7&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Web%20and%20Scripting%2015%20SP3 pkg:rpm/suse/php7&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-BCL pkg:rpm/suse/php7&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS pkg:rpm/suse/php7&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-BCL pkg:rpm/suse/php7&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS pkg:rpm/suse/php7&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSS pkg:rpm/suse/php7&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015 pkg:rpm/suse/php7&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1 pkg:rpm/suse/php7&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2 pkg:rpm/suse/php7&distro=SUSE%20Manager%20Proxy%204.1 pkg:rpm/suse/php7&distro=SUSE%20Manager%20Retail%20Branch%20Server%204.1 pkg:rpm/suse/php7&distro=SUSE%20Manager%20Server%204.1 pkg:rpm/suse/php7-embed&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP4 pkg:rpm/suse/php7-fastcgi&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Legacy%2015%20SP4 pkg:rpm/suse/php7-fpm&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Legacy%2015%20SP4 pkg:rpm/suse/php8&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Web%20and%20Scripting%2015%20SP4 pkg:rpm/suse/php8-embed&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Web%20and%20Scripting%2015%20SP4 pkg:rpm/suse/php8-fastcgi&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Web%20and%20Scripting%2015%20SP4 pkg:rpm/suse/php8-fpm&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Web%20and%20Scripting%2015%20SP4 pkg:rpm/suse/php8-test&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Web%20and%20Scripting%2015%20SP4
>= 7.4.0, < 7.4.30+ 91 more
- (no CPE)range: >= 7.4.0, < 7.4.30
- (no CPE)range: >= 7.4.0, < 7.4.30
- (no CPE)range: >= 7.4.0, < 7.4.30
- (no CPE)range: < 5.1.18-1.module_el8.6.0+2750+78feabcb
- (no CPE)range: < 1.6.1-1.module_el8.6.0+2750+78feabcb
- (no CPE)range: < 1.6.1-1.module_el8.6.0+2750+78feabcb
- (no CPE)range: < 1.6.1-1.module_el8.6.0+2750+78feabcb
- (no CPE)range: < 7.4.19-4.module_el8.6.0+3238+624bf8b8
- (no CPE)range: < 7.4.19-4.module_el8.6.0+3238+624bf8b8
- (no CPE)range: < 7.4.19-4.module_el8.6.0+3238+624bf8b8
- (no CPE)range: < 7.4.19-4.module_el8.6.0+3238+624bf8b8
- (no CPE)range: < 7.4.19-4.module_el8.6.0+3238+624bf8b8
- (no CPE)range: < 7.4.19-4.module_el8.6.0+3238+624bf8b8
- (no CPE)range: < 7.4.19-4.module_el8.6.0+3238+624bf8b8
- (no CPE)range: < 7.4.19-4.module_el8.6.0+3238+624bf8b8
- (no CPE)range: < 7.4.19-4.module_el8.6.0+3238+624bf8b8
- (no CPE)range: < 7.4.19-4.module_el8.6.0+3238+624bf8b8
- (no CPE)range: < 7.4.19-4.module_el8.6.0+3238+624bf8b8
- (no CPE)range: < 7.4.19-4.module_el8.6.0+3238+624bf8b8
- (no CPE)range: < 7.4.19-4.module_el8.6.0+3238+624bf8b8
- (no CPE)range: < 7.4.19-4.module_el8.6.0+3238+624bf8b8
- (no CPE)range: < 7.4.19-4.module_el8.6.0+3238+624bf8b8
- (no CPE)range: < 7.4.19-4.module_el8.6.0+3238+624bf8b8
- (no CPE)range: < 7.4.19-4.module_el8.6.0+3238+624bf8b8
- (no CPE)range: < 7.4.19-4.module_el8.6.0+3238+624bf8b8
- (no CPE)range: < 7.4.19-4.module_el8.6.0+3238+624bf8b8
- (no CPE)range: < 7.4.19-4.module_el8.6.0+3238+624bf8b8
- (no CPE)range: < 7.4.19-4.module_el8.6.0+3238+624bf8b8
- (no CPE)range: < 1:1.10.12-1.module_el8.6.0+2750+78feabcb
- (no CPE)range: < 5.1.18-1.module_el8.6.0+2750+78feabcb
- (no CPE)range: < 5.1.18-1.module_el8.6.0+2750+78feabcb
- (no CPE)range: < 2.0.1-1.module_el8.6.0+2750+78feabcb
- (no CPE)range: < 2.9.5-1.module_el8.6.0+2750+78feabcb
- (no CPE)range: < 3.1.2-1.module_el8.6.0+2739+efabdb8f
- (no CPE)range: < 1.18.2-1.module_el8.6.0+2750+78feabcb
- (no CPE)range: < 7.4.19-4.module_el8.6.0+3238+624bf8b8
- (no CPE)range: < 7.4.19-4.module_el8.6.0+3238+624bf8b8
- (no CPE)range: < 7.4.19-4.module_el8.6.0+3238+624bf8b8
- (no CPE)range: < 7.4.19-4.module_el8.6.0+3238+624bf8b8
- (no CPE)range: < 7.4.19-4.module_el8.6.0+3238+624bf8b8
- (no CPE)range: < 7.4.19-4.module_el8.6.0+3238+624bf8b8
- (no CPE)range: < 7.4.25-150400.4.8.1
- (no CPE)range: < 8.0.10-150400.4.8.1
- (no CPE)range: < 7.4.6-150200.3.41.1
- (no CPE)range: < 7.4.6-150200.3.41.1
- (no CPE)range: < 7.4.25-150400.4.8.1
- (no CPE)range: < 7.4.25-150400.4.8.1
- (no CPE)range: < 7.4.25-150400.4.8.1
- (no CPE)range: < 7.4.6-150200.3.41.1
- (no CPE)range: < 7.4.25-150400.4.8.1
- (no CPE)range: < 8.0.10-150400.4.8.1
- (no CPE)range: < 8.2.10-3.1
- (no CPE)range: < 8.0.10-150400.4.8.1
- (no CPE)range: < 8.0.10-150400.4.8.1
- (no CPE)range: < 8.0.10-150400.4.8.1
- (no CPE)range: < 8.0.10-150400.4.8.1
- (no CPE)range: < 7.4.25-150400.4.8.1
- (no CPE)range: < 8.0.10-150400.4.8.1
- (no CPE)range: < 7.2.5-1.81.1
- (no CPE)range: < 7.2.5-1.81.1
- (no CPE)range: < 7.4.6-1.42.1
- (no CPE)range: < 7.4.6-1.42.1
- (no CPE)range: < 7.2.5-150000.4.95.1
- (no CPE)range: < 7.4.6-150200.3.41.1
- (no CPE)range: < 7.2.5-150000.4.95.1
- (no CPE)range: < 7.2.5-150000.4.95.1
- (no CPE)range: < 7.4.6-150200.3.41.1
- (no CPE)range: < 7.4.6-150200.3.41.1
- (no CPE)range: < 7.2.5-150000.4.95.1
- (no CPE)range: < 7.2.5-150000.4.95.1
- (no CPE)range: < 7.4.25-150400.4.8.1
- (no CPE)range: < 7.4.6-150200.3.41.1
- (no CPE)range: < 7.4.6-150200.3.41.1
- (no CPE)range: < 7.2.5-150000.4.95.1
- (no CPE)range: < 7.2.5-150000.4.95.1
- (no CPE)range: < 7.4.6-150200.3.41.1
- (no CPE)range: < 7.4.6-150200.3.41.1
- (no CPE)range: < 7.2.5-150000.4.95.1
- (no CPE)range: < 7.2.5-150000.4.95.1
- (no CPE)range: < 7.2.5-150000.4.95.1
- (no CPE)range: < 7.4.6-150200.3.41.1
- (no CPE)range: < 7.4.6-150200.3.41.1
- (no CPE)range: < 7.4.6-150200.3.41.1
- (no CPE)range: < 7.4.6-150200.3.41.1
- (no CPE)range: < 7.4.25-150400.4.8.1
- (no CPE)range: < 7.4.25-150400.4.8.1
- (no CPE)range: < 7.4.25-150400.4.8.1
- (no CPE)range: < 8.0.10-150400.4.8.1
- (no CPE)range: < 8.0.10-150400.4.8.1
- (no CPE)range: < 8.0.10-150400.4.8.1
- (no CPE)range: < 8.0.10-150400.4.8.1
- (no CPE)range: < 8.0.10-150400.4.8.1

Patches

Vulnerability mechanics

References

bugs.php.net/bug.phpnvdExploitIssue TrackingMailing ListPatchVendor Advisory
lists.debian.org/debian-lts-announce/2022/12/msg00030.htmlnvdMailing ListThird Party Advisory
security.gentoo.org/glsa/202209-20nvdThird Party Advisory
security.netapp.com/advisory/ntap-20220722-0005/nvdThird Party Advisory
www.debian.org/security/2022/dsa-5179nvdThird Party Advisory
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3T4MMEEZYYAEHPQMZDFN44PHORJWJFZQ/nvd
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZZTZQKRGEYJT5UB4FGG3MOE72SQUHSL4/nvd

News mentions

No linked articles in our index yet.

cvss	0.526
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000