REDHAT-BUG-2425627: Null Pointer Dereference

Published Dec 27, 2025

Updated

In PHP versions 8.1. before 8.1.34, 8.2. before 8.2.30, 8.3. before 8.3.29, 8.4. before 8.4.16, 8.5. before 8.5.1 when using the PDO PostgreSQL driver with PDO::ATTREMULATEPREPARES enabled, an invalid character sequence (such as \x99) in a prepared statement parameter may cause the quoting function PQescapeStringConn to return NULL, leading to a null pointer dereference in pdoparseparams() function. This may lead to crashes (segmentation fault) and affect the availability of the target server.

Affected Software

1 affected component

The PHP Group PHP>8.1.34, >8.2.30, >8.3.29, >8.4.16, >8.5.1

Event History

Dec 27, 2025

Data Sourced

via Red Hat·08:01 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-2425627?

The severity of REDHAT-BUG-2425627 is classified as medium due to potential SQL injection risks.

How do I fix REDHAT-BUG-2425627?

To fix REDHAT-BUG-2425627, upgrade PHP to a version higher than 8.1.34, 8.2.30, 8.3.29, 8.4.16, or 8.5.1.

What versions of PHP are affected by REDHAT-BUG-2425627?

PHP versions 8.1.* before 8.1.34, 8.2.* before 8.2.30, 8.3.* before 8.3.29, 8.4.* before 8.4.16, and 8.5.* before 8.5.1 are affected by REDHAT-BUG-2425627.

What can happen if REDHAT-BUG-2425627 is exploited?

If REDHAT-BUG-2425627 is exploited, it may lead to SQL injection, which can compromise application data and security.

Is there a workaround for REDHAT-BUG-2425627?

A possible workaround for REDHAT-BUG-2425627 is to disable PDO::ATTR_EMULATE_PREPARES if using the PDO PostgreSQL driver.