When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.1.x below 7.1.31, 7.2.x below 7.2.21 and 7.3.x below 7.3.8 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
Configuration 5 (hide)
|
Configuration 6 (hide)
|
Configuration 7 (hide)
|
History
28 Feb 2023, 15:13
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:tenable:tenable.sc:*:*:*:*:*:*:*:* | |
References |
|
Information
Published : 2019-08-09 20:15
Updated : 2024-02-04 20:20
NVD link : CVE-2019-11041
Mitre link : CVE-2019-11041
CVE.ORG link : CVE-2019-11041
JSON object : View
Products Affected
redhat
- software_collections
debian
- debian_linux
tenable
- tenable.sc
canonical
- ubuntu_linux
php
- php
opensuse
- leap
apple
- mac_os_x
CWE
CWE-125
Out-of-bounds Read