PHP 8.5.7 `dom_xml_serialization_algorithm()` stack-overflow

Posted by Khashayar Fereidani on Jun 20

# PHP 8.5.7 `dom_xml_serialization_algorithm()` stack-overflow



**Author:** Khashayar Fereidani

**Disclosure Date:** 2026-06-18

**Advisory:**



## Description



The `dom_xml_serialization_algorithm()` and

`dom_xml_serialize_element_node()` functions in

`ext/dom/xml_serializer.c` rely on unbounded recursion to serialize

XML nodes....