CVE-2025-1735

Published Jul 13, 2025

Last updated 2 days ago

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-1735 is a security vulnerability that has been reserved by an organization for a new security problem. As of July 5, 2025, a detailed description of the vulnerability is not yet publicly available. However, Feedly AI has found discussions that indicate it affects PHP and OpenSSL. It is associated with security issues fixed in new PHP packages for Slackware 15.0, specifically within the pgsql extension related to error checking during escaping, and a NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix.

Description: In PHP versions:8.1.* before 8.1.33, 8.2.* before 8.2.29, 8.3.* before 8.3.23, 8.4.* pgsql and pdo_pgsql escaping functions do not check if the underlying quoting functions returned errors. This could cause crashes if Postgres server rejects the string as invalid.
Source: security@php.net
NVD status: Awaiting Analysis

Risk scores

CVSS 3.1

Type: Secondary
Base score: 5.9
Impact score: 3.6
Exploitability score: 2.2
Vector string: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Severity: MEDIUM

Weaknesses

security@php.net: CWE-89

Hype score: Not currently trending

References