cve 2025 1735

CVE-2025-1735 is a vulnerability in the PHP pgsql extension where the escaping logic fails to verify whether the PostgreSQL client library reported an error when escaping identifiers and strings. This flaw can cause crashes and, under specific conditions, enable injection-like behavior when applications rely on the extension's escaping as a defense. Multiple vendors and distribution advisories have confirmed the defect and shipped patched PHP builds. Operators using PHP with PostgreSQL should treat this as an operational priority and apply the available patches to maintain system stability and security.