An out-of-memory (OOM) condition occurs when a program cannot obtain enough memory to continue a task. It may happen because a workload uses more memory than expected or because the system has limited resources. Programs may respond by failing an operation, terminating, or following special error-handling and cleanup paths.
OOM handling matters in cyber security because bugs in those paths can leave internal state inconsistent. In a runtime such as PHP, a memory failure during request processing could expose memory corruption if error handling or cleanup uses invalid data. Depending on the flaw, that may cause a crash or, in severe cases, enable code execution; OOM itself does not mean an attack occurred. Defenders should apply relevant runtime or vendor patches, verify the build actually running on internet-facing services, and monitor for anomalies without treating their presence or absence as proof of compromise.