Back Linuxsecurity

Mageia PHP Critical Memory Corruption Vulnerability CVE-2026

Linuxsecurity •LinuxSecurity Advisories • July 20, 2026

Description: The updated php packages fix a security issue: Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD. (CVE-2026-14355)

- - -

- 9/core/php-8.2.32-1.mga9

Publication date: 20 Jul 2026 URL: https: //advisories.mageia.org/MGASA-2026-0274.html Type: security CVE: CVE-2026-14355

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical PHP Vulnerabilities in Ubuntu 26.04 LTS Lead to Denial of Service Risks On July 20, 2026, multiple vulnerabilities in PHP were disclosed, affecting Ubuntu 26.04 LTS. The vulnerabilities include a NULL pointer dereference (CVE-2026-12184) and a buffer allocation flaw in the OpenSSL extension (CVE-2026-14355). Both issues could lead to denial of service attacks or potentially allow arbitrary code execution. The vulnerabilities were confirmed to impact various PHP versions, including 8.5, 8.3, and 8.1. Users are advised to update their systems to mitigate these risks. The vulnerabilities were published on July 3, 2026. The PHP issues have been addressed in recent security updates. Administrators are encouraged to apply the patches immediately to ensure system security. 4 sources 72

Extracted Entities

Mageia PHP Critical Memory Corruption Vulnerability CVE-2026

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

Domains (1)

Platforms (2)