When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.1.x below 7.1.31, 7.2.x below 7.2.21 and 7.3.x below 7.3.8 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
Configuration 5 (hide)
|
Configuration 6 (hide)
|
Configuration 7 (hide)
|
History
28 Feb 2023, 15:13
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:tenable:tenable.sc:*:*:*:*:*:*:*:* | |
References |
|
Information
Published : 2019-08-09 20:15
Updated : 2024-02-04 20:20
NVD link : CVE-2019-11041
Mitre link : CVE-2019-11041
CVE.ORG link : CVE-2019-11041
JSON object : View
Products Affected
opensuse
- leap
tenable
- tenable.sc
php
- php
apple
- mac_os_x
canonical
- ubuntu_linux
redhat
- software_collections
debian
- debian_linux
CWE
CWE-125
Out-of-bounds Read