Checked fact 236023 Oct 2026Safety and security
The advisory says PHP uses longjmp() for out-of-memory errors to exit the current context and abort handling of the request.
The exact words it rests on
PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request.
What the source said when we opened it, on 23 Oct 2026.
The source
GHSA-w8hw-w9fx-j79w: RCE via OOM corruption (CVE-2026-109618)
Checked
Checked by the notis newsroom on , against the source above.
In the story
PHP patches two critical remote code execution flaws 23 Oct 2026
Cite this fact
Anyone may quote this address. It does not change; if we correct the story, this page says so.