Add a channel
All countries
All countriesUnited StatesUnited KingdomCanadaAustraliaNew ZealandIreland
More

Sections

LatestNewsWorld newsComedyMusicSportsGamingFilm & TVTechFamilyFoodCarsLifestyleMoneyScienceOutdoorsDIY & art

More on Trari

Daily chartWeekly chartMonthly chartCreatorsCategoriesAdd a channelArchiveAbout
More

Sections

LatestNewsWorld newsComedyMusicSportsGamingFilm & TVTechFamilyFoodCarsLifestyleMoneyScienceOutdoorsDIY & art

More on Trari

Daily chartWeekly chartMonthly chartCreatorsCategoriesAdd a channelArchiveAbout
Trari › Low Level
A video worth knowing

Low Level explains PHP's memory bug and incomplete fix

A cats-and-dogs code example makes the vulnerability understandable, before the report turns to questions about the patch.

Channel: Low Level Story of Trari Newsroom

Why this story? 1,367,713 views so far, and here is what is inside it.

php situation is insanephp situation is insane

Things we can learn from the video

Press to jump

  1. 2:51PHP supports widely used platforms including WordPress, Drupal, Laravel and Nextcloud, explaining the potential reach of a runtime flaw.
  2. 3:16A memory-allocation failure during file uploads can leave the program using memory it has already freed.
  3. 6:14Cat and dog structures in C illustrate how a use-after-free bug can lead to unintended code execution.
  4. 8:18Low Level describes researchers using language models to find bugs involving when memory is used and released.
  5. 9:03Reports of double-free errors after the official patch raise questions about whether the repair is complete.

Low Level reaches for cats and dogs to explain how a file-upload bug could let an outsider run code on a web server. The animals are structures in a C programming example, a way into the memory-management problem behind "php situation is insane".

Reporting from a Las Vegas hotel room while attending SentinelOne's OneCon event, the host describes a flaw in PHP, the software underpinning sites and applications built with tools such as WordPress, Drupal and Laravel. He says the bug has been sitting in the code for more than two decades.

The explanation gets concrete: when memory allocation fails during file-upload handling, the program can end up using memory it has already released. That is a "use-after-free" bug. His example shows how reusing that space for something else can turn a stale reference into a route to unintended code execution.

Finding the flaw is only part of this report. Low Level describes researchers using large language models to uncover bugs involving the lifetime of objects in memory. He then examines social media reports showing that the official patch still produces double-free errors, where software tries to release the same memory twice. His concern is not simply that a fix was needed, but that the first fix may not finish the job.

The video has reached about 1.4 million views in three days. In the comments, the technical discussion shares space with a recurring joke: major internet problems seem to wait until Low Level is away from home.

Published on Trari

Where next?

More from Low LevelOn today's chart 594K views since yesterdayLow Level examines what smart TVs may be listening forHis reverse-engineering analysis connects reported TV telemetry with a bigger question: how much control do buyers have over their own devices?Channel: Low Level · Story of October 30, 2026 Also in Technology companies and softwareViews jump 8.9x the channel's usual paceMatt Wolfe puts his newsletter strategy before an AI panelNate Herk's "Roast Room" workflow gives the channel's automation coverage a practical test as daily views rise sharply.Channel: Matt Wolfe · Story of October 31, 2026 A different discovery todayVideo taking off 47x its usual first dayDiane Sawyer's Patrick Stewart interview closes World News TonightThe October 29 edition also covers Alaska's Senate probes and a Pentagon firing, but its comment section belongs largely to the actor.Channel: ABC News · Story of October 31, 2026

What viewers say

  • STOP GOING ON VACATION, THE INTERNET KEEPS BREAKING WHEN YOU LEAVE
    @sampellinoSee it on YouTube
  • mysteriously in a hotel every time something like this happens
    @hri7566See it on YouTube
  • AI has become Internet’s LockPickingLawyer.
    @keyserzoom9154See it on YouTube
3 more comments
  • Who else here was waiting for Low Level’s take on this?
    @YouthureSee it on YouTube
  • Work in Patch Management
    This one broke me in one day with all the customers shouting for a quick fix
    @gagans8654See it on YouTube
  • I've been eagerly waiting for this video. Your explanations of exploits and vulnerabilities are always fun and informative. I also know that you will never see this comment, because somehow there are 80 comments already, only 20 minutes after you posted it.
    But anyway, keep up the good work!
    @fighterguardSee it on YouTube

Public comments from the video's page on YouTube

Or follow us on Telegram

The facts
Channel
Low Level
Subscribers
1,190,000 ▲ 10,000 this week
Channel views, last 7 days
4,980,782
Channel views, pace per day
196,462 (on a normal day: 563,805)
Video published
October 22, 2026
Video views so far
1,367,713 (3 days online)
Video views, pace per day
147,549 (on a normal day: 617,635)

The numbers

The PHP report has passed a million views. Here is how its audience sits alongside Low Level's wider channel activity.

subscribers
1,190,000
▲ 10,000 in the last 7 days
total views
159,670,429
views per day
196,462
typical day: 563,805
the video
views
1,367,713
likes
21,084
comments
1,360
days online
3
subscribers: this channel and similar channels
Tina Huang
1,360,000
Low Level
1,190,000
Teacher's Tech
1,190,000
Dave's Garage
1,150,000
Nate Herk | AI Automation
1,090,000
Matt Wolfe
1,020,000
As of October 25, 2026 · Data source: Trari Social News, Trari Traffic Trends and Ranking Platform, Google YouTube
Subscriber, view, like and comment counts are YouTube's. Rates, usual days, rankings, comparisons and categories are Trari's own calculations.
Developed with YouTube

💡 Test your knowledge

What does RCE stand for in cybersecurity?