PHP 8.5.12 may not have completely fixed the latest PHP security issue.
Security researcher Elise Boyd says a double-free crash still works on the patched version.
So far, it has only been demonstrated as a local command-line crash. There is no evidence that it can be exploited remotely, and PHP has not confirmed the finding.