CVE-2025-1218

Name of the Vulnerable Software and Affected Versions php (affected versions not specified)

Description The mysqlnd wire protocol parser reads fields from server packets without first verifying if the packet contains sufficient bytes. This allows a malicious or compromised MySQL server to send a truncated packet, causing the client to read beyond the packet buffer. This undefined behavior can lead to a process crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.