CVE catalog

CVE-2022-31627

php8-8.1.8-1.1 on GA media

[CVE catalog]

Severity
High · CVSS 8.1CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Published
Updated
Source
[NVD] · [CVE record]
EPSS
2.14% · Oct 25, 2026

In PHP versions 8.1.x below 8.1.8, when fileinfo functions, such as finfo_buffer, due to incorrect patch applied to the third party code from libmagic, incorrect function may be used to free allocated memory, which may lead to heap corruption.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Ubuntuphp8.122.048.1.0~rc4-1ubuntu2vulnerable
Ubuntuphp8.122.048.1.0-1vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu1vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.1vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.2fixed
Ubuntuphp8.122.048.1.0~rc4-1ubuntu2vulnerable
Ubuntuphp8.122.048.1.0-1vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu1vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.1vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.2fixed
Opensusephp8tumbleweed8.1.8-1.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Ubuntuphp8.1deb22.048.1.2-1ubuntu2.2Not reportedUBUNTU-CVE-2022-31627Not reported
Ubuntuphp8.1deb22.048.1.2-1ubuntu2.2Not reportedUSN-5530-1Not reported
Opensusephp8rpmtumbleweed8.1.8-1.1Not reportedOPENSUSE-SU-2024:12218-1Not reported

OpenFactory catalog packages

[openSUSE Tumbleweed]

  • [php8-bcmath]Unknown

    Source package: [php8]

    Details (1)

    • 8.5.9-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 8.1.8-1.1

      Version impact unknown

      pypi · php8 · opensuse · tumbleweed

  • [php8-bz2]Unknown

    Source package: [php8]

    Details (1)

    • 8.5.9-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 8.1.8-1.1

      Version impact unknown

      pypi · php8 · opensuse · tumbleweed

  • [php8-calendar]Unknown

    Source package: [php8]

    Details (1)

    • 8.5.9-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 8.1.8-1.1

      Version impact unknown

      pypi · php8 · opensuse · tumbleweed

  • [php8-cli]Unknown

    Source package: [php8]

    Details (1)

    • 8.5.9-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 8.1.8-1.1

      Version impact unknown

      pypi · php8 · opensuse · tumbleweed

  • [php8-ctype]Unknown

    Source package: [php8]

    Details (1)

    • 8.5.9-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 8.1.8-1.1

      Version impact unknown

      pypi · php8 · opensuse · tumbleweed

  • [php8-curl]Unknown

    Source package: [php8]

    Details (1)

    • 8.5.9-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 8.1.8-1.1

      Version impact unknown

      pypi · php8 · opensuse · tumbleweed

  • [php8-dba]Unknown

    Source package: [php8]

    Details (1)

    • 8.5.9-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 8.1.8-1.1

      Version impact unknown

      pypi · php8 · opensuse · tumbleweed

  • [php8-devel]Unknown

    Source package: [php8]

    Details (1)

    • 8.5.9-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 8.1.8-1.1

      Version impact unknown

      pypi · php8 · opensuse · tumbleweed

  • [php8-dom]Unknown

    Source package: [php8]

    Details (1)

    • 8.5.9-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 8.1.8-1.1

      Version impact unknown

      pypi · php8 · opensuse · tumbleweed

  • [php8-enchant]Unknown

    Source package: [php8]

    Details (1)

    • 8.5.9-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 8.1.8-1.1

      Version impact unknown

      pypi · php8 · opensuse · tumbleweed

  • [php8-exif]Unknown

    Source package: [php8]

    Details (1)

    • 8.5.9-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 8.1.8-1.1

      Version impact unknown

      pypi · php8 · opensuse · tumbleweed

  • [php8-ffi]Unknown

    Source package: [php8]

    Details (1)

    • 8.5.9-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 8.1.8-1.1

      Version impact unknown

      pypi · php8 · opensuse · tumbleweed

  • [php8-fileinfo]Unknown

    Source package: [php8]

    Details (1)

    • 8.5.9-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 8.1.8-1.1

      Version impact unknown

      pypi · php8 · opensuse · tumbleweed

  • [php8-ftp]Unknown

    Source package: [php8]

    Details (1)

    • 8.5.9-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 8.1.8-1.1

      Version impact unknown

      pypi · php8 · opensuse · tumbleweed

  • [php8-gd]Unknown

    Source package: [php8]

    Details (1)

    • 8.5.9-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 8.1.8-1.1

      Version impact unknown

      pypi · php8 · opensuse · tumbleweed

  • [php8-gettext]Unknown

    Source package: [php8]

    Details (1)

    • 8.5.9-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 8.1.8-1.1

      Version impact unknown

      pypi · php8 · opensuse · tumbleweed

  • [php8-gmp]Unknown

    Source package: [php8]

    Details (1)

    • 8.5.9-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 8.1.8-1.1

      Version impact unknown

      pypi · php8 · opensuse · tumbleweed

  • [php8-iconv]Unknown

    Source package: [php8]

    Details (1)

    • 8.5.9-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 8.1.8-1.1

      Version impact unknown

      pypi · php8 · opensuse · tumbleweed

  • [php8-intl]Unknown

    Source package: [php8]

    Details (1)

    • 8.5.9-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 8.1.8-1.1

      Version impact unknown

      pypi · php8 · opensuse · tumbleweed

  • [php8-ldap]Unknown

    Source package: [php8]

    Details (1)

    • 8.5.9-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 8.1.8-1.1

      Version impact unknown

      pypi · php8 · opensuse · tumbleweed

Next results

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]