← CVE Intelligence

CVE-2026-7262

NULL pointer dereference in SOAP apache:Map decoder with missing <value> PUBLISHED

Description (CNA)

In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, when a SOAP server has a typemap configured, the decoding process contains a mistake which checks the wrong variable in case of missing value element.  This leads to dereferences a NULL pointer, causing a segmentation fault. This allows a remote unauthenticated attacker to crash the PHP SOAP server process, resulting in denial of service.

Affected (CNA)

Vendor / productVersions
PHP Group / PHPaffected 8.2.* before 8.2.31; affected 8.3.* before 8.3.31; affected 8.4.* before 8.4.21; affected 8.5.* before 8.5.6

CWE

CWE-476

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

redhat-SADP

A flaw was found in PHP. When a PHP SOAP server has a typemap configured, the apache:Map decoding process checks the incorrect variable in case of a missing value element. This incorrect check leads to a NULL pointer dereference and allows a remote unauthenticated attacker to crash the PHP SOAP server process, resulting in a denial of service.