CVE-2022-31627
Fixed in a distro release EPSS 2%CVSS 7.7
In PHP versions 8.1.x below 8.1.8, when fileinfo functions, such as finfo_buffer, due to incorrect patch applied to the third party code from libmagic, incorrect function may be used to free allocated memory, which may lead to heap corruption.
Products: PHP Group PHP
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu 22.04 LTS | php8.1 | 8.1.2-1ubuntu2.2 |
| openSUSE Tumbleweed | php8 | 8.1.8-1.1 |