When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
History
20 Dec 2022, 22:05
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:tenable:securitycenter:*:*:*:*:*:*:*:* cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:* |
|
References |
|
Information
Published : 2019-12-23 03:15
Updated : 2024-02-04 20:39
NVD link : CVE-2019-11050
Mitre link : CVE-2019-11050
CVE.ORG link : CVE-2019-11050
JSON object : View
Products Affected
debian
- debian_linux
canonical
- ubuntu_linux
php
- php
opensuse
- leap
tenable
- securitycenter
fedoraproject
- fedora
CWE
CWE-125
Out-of-bounds Read