CVE-2025-14178 | PHP up to 8.1.33/8.2.29/8.3.28/8.4.15/8.5.0 array_merge out-of-bounds write

A vulnerability was found in PHP up to 8.1.33/8.2.29/8.3.28/8.4.15/8.5.0. It has been rated as critical. Impacted is the function array_merge. Performing manipulation results in out-of-bounds write.

This vulnerability is identified as CVE-2025-14178. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is advised.