Vulnerability · Published Dec 27, 2025 · Assigned by php

CVE-2025-14180NULL Pointer Dereference in PDO quoting

High 8.2

In plain English

A high-severity null pointer dereference in PHP from PHP Group. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 53% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 4.0)8.2High
Exploit odds (30 days)0.7%top 46.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known

Official description

In PHP versions 8.1.* before 8.1.34, 8.2.* before 8.2.30, 8.3.* before 8.3.29, 8.4.* before 8.4.16, 8.5.* before 8.5.1 when using the PDO PostgreSQL driver with PDO::ATTR_EMULATE_PREPARES enabled, an invalid character sequence (such as \x99) in a prepared statement parameter may cause the quoting function PQescapeStringConn to return NULL, leading to a null pointer dereference in pdo_parse_params() function. This may lead to crashes (segmentation fault) and affect the availability of the target server.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8apcu-panel5.1.23-1.module_el8.10.0+3796+30ed3ef7ALSA-2026:1412
AlmaLinux:9apcu-panel5.1.23-1.module_el9.6.0+151+5f31e576ALSA-2026:1429
AlmaLinux:9apcu-panel5.1.23-1.module_el9.4.0+65+49ff6472ALSA-2026:1409
AlmaLinux:8libzip1.7.3-1.module_el8.10.0+3796+30ed3ef7ALSA-2026:1412
AlmaLinux:8libzip-devel1.7.3-1.module_el8.10.0+3796+30ed3ef7ALSA-2026:1412
AlmaLinux:8libzip-tools1.7.3-1.module_el8.10.0+3796+30ed3ef7ALSA-2026:1412
AlmaLinux:10php8.3.29-1.el10_1ALSA-2026:1628
AlmaLinux:8php8.2.30-1.module_el8.10.0+4108+cff35472ALSA-2026:1412
AlmaLinux:9php8.3.29-1.module_el9.7.0+206+f4fec7f3ALSA-2026:1429
AlmaLinux:9php8.2.30-1.module_el9.7.0+205+fe410f10ALSA-2026:1409
AlmaLinux:10php-bcmath8.3.29-1.el10_1ALSA-2026:1628
AlmaLinux:8php-bcmath8.2.30-1.module_el8.10.0+4108+cff35472ALSA-2026:1412
AlmaLinux:9php-bcmath8.3.29-1.module_el9.7.0+206+f4fec7f3ALSA-2026:1429
AlmaLinux:9php-bcmath8.2.30-1.module_el9.7.0+205+fe410f10ALSA-2026:1409
AlmaLinux:10php-cli8.3.29-1.el10_1ALSA-2026:1628
AlmaLinux:8php-cli8.2.30-1.module_el8.10.0+4108+cff35472ALSA-2026:1412
AlmaLinux:9php-cli8.2.30-1.module_el9.7.0+205+fe410f10ALSA-2026:1409
AlmaLinux:9php-cli8.3.29-1.module_el9.7.0+206+f4fec7f3ALSA-2026:1429
AlmaLinux:10php-common8.3.29-1.el10_1ALSA-2026:1628
AlmaLinux:8php-common8.2.30-1.module_el8.10.0+4108+cff35472ALSA-2026:1412
AlmaLinux:9php-common8.2.30-1.module_el9.7.0+205+fe410f10ALSA-2026:1409
AlmaLinux:9php-common8.3.29-1.module_el9.7.0+206+f4fec7f3ALSA-2026:1429
AlmaLinux:10php-dba8.3.29-1.el10_1ALSA-2026:1628
AlmaLinux:8php-dba8.2.30-1.module_el8.10.0+4108+cff35472ALSA-2026:1412
AlmaLinux:9php-dba8.3.29-1.module_el9.7.0+206+f4fec7f3ALSA-2026:1429
AlmaLinux:9php-dba8.2.30-1.module_el9.7.0+205+fe410f10ALSA-2026:1409
AlmaLinux:10php-dbg8.3.29-1.el10_1ALSA-2026:1628
AlmaLinux:8php-dbg8.2.30-1.module_el8.10.0+4108+cff35472ALSA-2026:1412
AlmaLinux:9php-dbg8.2.30-1.module_el9.7.0+205+fe410f10ALSA-2026:1409
AlmaLinux:9php-dbg8.3.29-1.module_el9.7.0+206+f4fec7f3ALSA-2026:1429
AlmaLinux:10php-devel8.3.29-1.el10_1ALSA-2026:1628
AlmaLinux:8php-devel8.2.30-1.module_el8.10.0+4108+cff35472ALSA-2026:1412
AlmaLinux:9php-devel8.2.30-1.module_el9.7.0+205+fe410f10ALSA-2026:1409
AlmaLinux:9php-devel8.3.29-1.module_el9.7.0+206+f4fec7f3ALSA-2026:1429
AlmaLinux:10php-embedded8.3.29-1.el10_1ALSA-2026:1628
AlmaLinux:8php-embedded8.2.30-1.module_el8.10.0+4108+cff35472ALSA-2026:1412
AlmaLinux:9php-embedded8.3.29-1.module_el9.7.0+206+f4fec7f3ALSA-2026:1429
AlmaLinux:9php-embedded8.2.30-1.module_el9.7.0+205+fe410f10ALSA-2026:1409
AlmaLinux:10php-enchant8.3.29-1.el10_1ALSA-2026:1628
AlmaLinux:8php-enchant8.2.30-1.module_el8.10.0+4108+cff35472ALSA-2026:1412
AlmaLinux:9php-enchant8.3.29-1.module_el9.7.0+206+f4fec7f3ALSA-2026:1429
AlmaLinux:9php-enchant8.2.30-1.module_el9.7.0+205+fe410f10ALSA-2026:1409
AlmaLinux:10php-ffi8.3.29-1.el10_1ALSA-2026:1628
AlmaLinux:8php-ffi8.2.30-1.module_el8.10.0+4108+cff35472ALSA-2026:1412
AlmaLinux:9php-ffi8.2.30-1.module_el9.7.0+205+fe410f10ALSA-2026:1409
AlmaLinux:9php-ffi8.3.29-1.module_el9.7.0+206+f4fec7f3ALSA-2026:1429
AlmaLinux:10php-fpm8.3.29-1.el10_1ALSA-2026:1628
AlmaLinux:8php-fpm8.2.30-1.module_el8.10.0+4108+cff35472ALSA-2026:1412
AlmaLinux:9php-fpm8.2.30-1.module_el9.7.0+205+fe410f10ALSA-2026:1409
AlmaLinux:9php-fpm8.3.29-1.module_el9.7.0+206+f4fec7f3ALSA-2026:1429
AlmaLinux:10php-gd8.3.29-1.el10_1ALSA-2026:1628
AlmaLinux:8php-gd8.2.30-1.module_el8.10.0+4108+cff35472ALSA-2026:1412
AlmaLinux:9php-gd8.3.29-1.module_el9.7.0+206+f4fec7f3ALSA-2026:1429
AlmaLinux:9php-gd8.2.30-1.module_el9.7.0+205+fe410f10ALSA-2026:1409
AlmaLinux:10php-gmp8.3.29-1.el10_1ALSA-2026:1628
AlmaLinux:8php-gmp8.2.30-1.module_el8.10.0+4108+cff35472ALSA-2026:1412
AlmaLinux:9php-gmp8.3.29-1.module_el9.7.0+206+f4fec7f3ALSA-2026:1429
AlmaLinux:9php-gmp8.2.30-1.module_el9.7.0+205+fe410f10ALSA-2026:1409
AlmaLinux:10php-intl8.3.29-1.el10_1ALSA-2026:1628
AlmaLinux:8php-intl8.2.30-1.module_el8.10.0+4108+cff35472ALSA-2026:1412
AlmaLinux:9php-intl8.2.30-1.module_el9.7.0+205+fe410f10ALSA-2026:1409
AlmaLinux:9php-intl8.3.29-1.module_el9.7.0+206+f4fec7f3ALSA-2026:1429
AlmaLinux:10php-ldap8.3.29-1.el10_1ALSA-2026:1628
AlmaLinux:8php-ldap8.2.30-1.module_el8.10.0+4108+cff35472ALSA-2026:1412
AlmaLinux:9php-ldap8.3.29-1.module_el9.7.0+206+f4fec7f3ALSA-2026:1429
AlmaLinux:9php-ldap8.2.30-1.module_el9.7.0+205+fe410f10ALSA-2026:1409
AlmaLinux:10php-mbstring8.3.29-1.el10_1ALSA-2026:1628
AlmaLinux:8php-mbstring8.2.30-1.module_el8.10.0+4108+cff35472ALSA-2026:1412
AlmaLinux:9php-mbstring8.2.30-1.module_el9.7.0+205+fe410f10ALSA-2026:1409
AlmaLinux:9php-mbstring8.3.29-1.module_el9.7.0+206+f4fec7f3ALSA-2026:1429
AlmaLinux:10php-mysqlnd8.3.29-1.el10_1ALSA-2026:1628
AlmaLinux:8php-mysqlnd8.2.30-1.module_el8.10.0+4108+cff35472ALSA-2026:1412
AlmaLinux:9php-mysqlnd8.2.30-1.module_el9.7.0+205+fe410f10ALSA-2026:1409
AlmaLinux:9php-mysqlnd8.3.29-1.module_el9.7.0+206+f4fec7f3ALSA-2026:1429
AlmaLinux:10php-odbc8.3.29-1.el10_1ALSA-2026:1628
AlmaLinux:8php-odbc8.2.30-1.module_el8.10.0+4108+cff35472ALSA-2026:1412
AlmaLinux:9php-odbc8.2.30-1.module_el9.7.0+205+fe410f10ALSA-2026:1409
AlmaLinux:9php-odbc8.3.29-1.module_el9.7.0+206+f4fec7f3ALSA-2026:1429
AlmaLinux:10php-opcache8.3.29-1.el10_1ALSA-2026:1628
AlmaLinux:8php-opcache8.2.30-1.module_el8.10.0+4108+cff35472ALSA-2026:1412
AlmaLinux:9php-opcache8.3.29-1.module_el9.7.0+206+f4fec7f3ALSA-2026:1429
AlmaLinux:9php-opcache8.2.30-1.module_el9.7.0+205+fe410f10ALSA-2026:1409
AlmaLinux:10php-pdo8.3.29-1.el10_1ALSA-2026:1628
AlmaLinux:8php-pdo8.2.30-1.module_el8.10.0+4108+cff35472ALSA-2026:1412
AlmaLinux:9php-pdo8.3.29-1.module_el9.7.0+206+f4fec7f3ALSA-2026:1429
AlmaLinux:9php-pdo8.2.30-1.module_el9.7.0+205+fe410f10ALSA-2026:1409
AlmaLinux:8php-pear1:1.10.14-1.module_el8.10.0+3796+30ed3ef7ALSA-2026:1412
AlmaLinux:8php-pecl-apcu5.1.23-1.module_el8.10.0+3796+30ed3ef7ALSA-2026:1412
AlmaLinux:9php-pecl-apcu5.1.23-1.module_el9.4.0+65+49ff6472ALSA-2026:1409
AlmaLinux:9php-pecl-apcu5.1.23-1.module_el9.6.0+151+5f31e576ALSA-2026:1429
AlmaLinux:8php-pecl-apcu-devel5.1.23-1.module_el8.10.0+3796+30ed3ef7ALSA-2026:1412
AlmaLinux:9php-pecl-apcu-devel5.1.23-1.module_el9.6.0+151+5f31e576ALSA-2026:1429
AlmaLinux:9php-pecl-apcu-devel5.1.23-1.module_el9.4.0+65+49ff6472ALSA-2026:1409
AlmaLinux:9php-pecl-redis66.1.0-2.module_el9.6.0+151+5f31e576ALSA-2026:1429
AlmaLinux:8php-pecl-rrd2.0.3-1.module_el8.10.0+3796+30ed3ef7ALSA-2026:1412
AlmaLinux:9php-pecl-rrd2.0.3-4.module_el9.4.0+65+49ff6472ALSA-2026:1409
AlmaLinux:9php-pecl-rrd2.0.3-4.module_el9.6.0+151+5f31e576ALSA-2026:1429
AlmaLinux:8php-pecl-xdebug33.2.2-2.module_el8.10.0+3796+30ed3ef7ALSA-2026:1412
AlmaLinux:9php-pecl-xdebug33.3.1-1.module_el9.6.0+151+5f31e576ALSA-2026:1429
AlmaLinux:9php-pecl-xdebug33.2.2-2.module_el9.4.0+65+49ff6472ALSA-2026:1409
AlmaLinux:8php-pecl-zip1.22.3-1.module_el8.10.0+3796+30ed3ef7ALSA-2026:1412
AlmaLinux:9php-pecl-zip1.22.3-1.module_el9.6.0+151+5f31e576ALSA-2026:1429
AlmaLinux:9php-pecl-zip1.22.3-1.module_el9.4.0+65+49ff6472ALSA-2026:1409
AlmaLinux:10php-pgsql8.3.29-1.el10_1ALSA-2026:1628
AlmaLinux:8php-pgsql8.2.30-1.module_el8.10.0+4108+cff35472ALSA-2026:1412
AlmaLinux:9php-pgsql8.3.29-1.module_el9.7.0+206+f4fec7f3ALSA-2026:1429
AlmaLinux:9php-pgsql8.2.30-1.module_el9.7.0+205+fe410f10ALSA-2026:1409
AlmaLinux:10php-process8.3.29-1.el10_1ALSA-2026:1628
AlmaLinux:8php-process8.2.30-1.module_el8.10.0+4108+cff35472ALSA-2026:1412
AlmaLinux:9php-process8.2.30-1.module_el9.7.0+205+fe410f10ALSA-2026:1409
AlmaLinux:9php-process8.3.29-1.module_el9.7.0+206+f4fec7f3ALSA-2026:1429
AlmaLinux:10php-snmp8.3.29-1.el10_1ALSA-2026:1628
AlmaLinux:8php-snmp8.2.30-1.module_el8.10.0+4108+cff35472ALSA-2026:1412
AlmaLinux:9php-snmp8.2.30-1.module_el9.7.0+205+fe410f10ALSA-2026:1409
AlmaLinux:9php-snmp8.3.29-1.module_el9.7.0+206+f4fec7f3ALSA-2026:1429
AlmaLinux:10php-soap8.3.29-1.el10_1ALSA-2026:1628
AlmaLinux:8php-soap8.2.30-1.module_el8.10.0+4108+cff35472ALSA-2026:1412
AlmaLinux:9php-soap8.2.30-1.module_el9.7.0+205+fe410f10ALSA-2026:1409
AlmaLinux:9php-soap8.3.29-1.module_el9.7.0+206+f4fec7f3ALSA-2026:1429
AlmaLinux:10php-xml8.3.29-1.el10_1ALSA-2026:1628
AlmaLinux:8php-xml8.2.30-1.module_el8.10.0+4108+cff35472ALSA-2026:1412
AlmaLinux:9php-xml8.2.30-1.module_el9.7.0+205+fe410f10ALSA-2026:1409
AlmaLinux:9php-xml8.3.29-1.module_el9.7.0+206+f4fec7f3ALSA-2026:1429
Alpine:v3.22php828.2.30-r0ALPINE-CVE-2025-14180
Alpine:v3.22php838.3.29-r0ALPINE-CVE-2025-14180
Alpine:v3.23php838.3.29-r0ALPINE-CVE-2025-14180
Alpine:v3.24php838.3.29-r0ALPINE-CVE-2025-14180
Alpine:v3.22php848.4.16-r0ALPINE-CVE-2025-14180
Alpine:v3.23php848.4.16-r0ALPINE-CVE-2025-14180
Alpine:v3.24php848.4.16-r0ALPINE-CVE-2025-14180
Alpine:v3.23php858.5.1-r0ALPINE-CVE-2025-14180
Alpine:v3.24php858.5.1-r0ALPINE-CVE-2025-14180
Debian:12php8.28.2.30-1~deb12u1DEBIAN-CVE-2025-14180
Debian:12php8.28.2.30-1~deb12u1DSA-6154-1
Debian:13php8.48.4.16-1~deb13u1DSA-6088-1
Debian:13php8.48.4.16-1~deb13u1DEBIAN-CVE-2025-14180
Debian:14php8.48.4.16-1DEBIAN-CVE-2025-14180
Rocky Linux:8libzip0:1.7.3-1.module+el8.10.0+1911+f499711eRLSA-2026:1412
Rocky Linux:8libzip0:1.7.3-1.module+el8.10.0+1605+02e07af7RLSA-2026:1412
Rocky Linux:8libzip0:1.7.3-1.module+el8.10.0+1596+477f03f8RLSA-2026:1412
Rocky Linux:10php0:8.3.29-1.el10_1RLSA-2026:1628
Rocky Linux:8php0:8.2.30-1.module+el8.10.0+40072+7124940cRLSA-2026:1412
Rocky Linux:8php-pear1:1.10.14-1.module+el8.10.0+1596+477f03f8RLSA-2026:1412
Rocky Linux:8php-pear1:1.10.14-1.module+el8.10.0+1911+f499711eRLSA-2026:1412
Rocky Linux:8php-pecl-apcu0:5.1.23-1.module+el8.10.0+1911+f499711eRLSA-2026:1412
Rocky Linux:8php-pecl-apcu0:5.1.23-1.module+el8.10.0+1596+477f03f8RLSA-2026:1412
Rocky Linux:9php-pecl-apcu0:5.1.23-1.module+el9.7.0+40004+bf50a568RLSA-2026:1409
Rocky Linux:9php-pecl-apcu0:5.1.23-1.module+el9.7.0+40004+bf50a568RLSA-2026:1429
Rocky Linux:9php-pecl-apcu0:5.1.23-1.module+el9.7.0+40005+715283ecRLSA-2026:1429
Rocky Linux:9php-pecl-apcu0:5.1.23-1.module+el9.7.0+40005+715283ecRLSA-2026:1409
Rocky Linux:9php-pecl-redis60:6.1.0-2.module+el9.7.0+40005+715283ecRLSA-2026:1429
Rocky Linux:8php-pecl-rrd0:2.0.3-1.module+el8.10.0+1911+f499711eRLSA-2026:1412
Rocky Linux:8php-pecl-rrd0:2.0.3-1.module+el8.10.0+1605+02e07af7RLSA-2026:1412
Rocky Linux:8php-pecl-rrd0:2.0.3-1.module+el8.10.0+1596+477f03f8RLSA-2026:1412
Rocky Linux:9php-pecl-rrd0:2.0.3-4.module+el9.7.0+40005+715283ecRLSA-2026:1409
Rocky Linux:9php-pecl-rrd0:2.0.3-4.module+el9.7.0+40004+bf50a568RLSA-2026:1409
Rocky Linux:9php-pecl-rrd0:2.0.3-4.module+el9.7.0+40003+454ed3c4RLSA-2026:1409
Rocky Linux:9php-pecl-rrd0:2.0.3-4.module+el9.7.0+40004+bf50a568RLSA-2026:1429
Rocky Linux:9php-pecl-rrd0:2.0.3-4.module+el9.7.0+40003+454ed3c4RLSA-2026:1429
Rocky Linux:9php-pecl-rrd0:2.0.3-4.module+el9.7.0+40005+715283ecRLSA-2026:1429
Rocky Linux:8php-pecl-xdebug30:3.2.2-2.module+el8.10.0+1596+477f03f8RLSA-2026:1412
Rocky Linux:8php-pecl-xdebug30:3.2.2-2.module+el8.10.0+1911+f499711eRLSA-2026:1412
Rocky Linux:9php-pecl-xdebug30:3.3.1-1.module+el9.7.0+40005+715283ecRLSA-2026:1429
Rocky Linux:9php-pecl-xdebug30:3.2.2-2.module+el9.7.0+40004+bf50a568RLSA-2026:1409
Rocky Linux:8php-pecl-zip0:1.22.3-1.module+el8.10.0+1596+477f03f8RLSA-2026:1412
Rocky Linux:8php-pecl-zip0:1.22.3-1.module+el8.10.0+1911+f499711eRLSA-2026:1412
Rocky Linux:9php-pecl-zip0:1.22.3-1.module+el9.7.0+40004+bf50a568RLSA-2026:1429
Rocky Linux:9php-pecl-zip0:1.22.3-1.module+el9.7.0+40005+715283ecRLSA-2026:1409
Rocky Linux:9php-pecl-zip0:1.22.3-1.module+el9.7.0+40005+715283ecRLSA-2026:1429
Rocky Linux:9php-pecl-zip0:1.22.3-1.module+el9.7.0+40004+bf50a568RLSA-2026:1409
Ubuntu:22.04:LTSphp8.18.1.2-1ubuntu2.23UBUNTU-CVE-2025-14180
Ubuntu:22.04:LTSphp8.18.1.2-1ubuntu2.23USN-7953-1
Ubuntu:24.04:LTSphp8.38.3.6-0ubuntu0.24.04.6USN-7953-1
Ubuntu:24.04:LTSphp8.38.3.6-0ubuntu0.24.04.6UBUNTU-CVE-2025-14180
Ubuntu:25.10php8.48.4.11-1ubuntu1.1UBUNTU-CVE-2025-14180
Ubuntu:25.10php8.48.4.11-1ubuntu1.1USN-7953-1

Affected products (as reported)

VendorProductVersions
PHP Group PHP 8.1.* – before 8.1.348.2.* – before 8.2.308.3.* – before 8.3.298.4.* – before 8.4.168.5.* – before 8.5.1

Weakness: CWE-476 · Vector: CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

References