https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 07 Nov 2026 09:19:10 +0000 https://vulnerability.circl.lu/vuln/cve-2026-109618 <p><strong>Affected:</strong> PHP Group PHP, Siemens AMIS TS, Siemens AX4, Siemens blueplanet 360 NX3 M6 WM OD IISX, Siemens blueplanet 360 NX3 M6 WM OD IISX - S, Siemens Building X, Siemens CADRA, Siemens Call stations, Siemens Capital, Siemens Chargesight and 97 more</p> <p>PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).</p> <p><strong>Affected:</strong> PHP Group PHP, Siemens AMIS TS, Siemens AX4, Siemens blueplanet 360 NX3 M6 WM OD IISX, Siemens blueplanet 360 NX3 M6 WM OD IISX - S, Siemens Building X, Siemens CADRA, Siemens Call stations, Siemens Capital, Siemens Chargesight and 97 more</p> <p>PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).</p> https://vulnerability.circl.lu/vuln/cve-2026-109618