An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an Invalid Read in exif_process_SOFn.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
Configuration 5 (hide)
|
Configuration 6 (hide)
|
History
05 Apr 2022, 20:48
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:redhat:software_collections:1.0:*:*:*:*:*:*:* cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:* cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:* |
|
CWE | CWE-125 | |
References | (SUSE) http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00044.html - Mailing List, Third Party Advisory | |
References | (SUSE) http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00012.html - Mailing List, Third Party Advisory | |
References | (REDHAT) https://access.redhat.com/errata/RHSA-2019:2519 - Third Party Advisory | |
References | (SUSE) http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00041.html - Mailing List, Third Party Advisory | |
References | (REDHAT) https://access.redhat.com/errata/RHSA-2019:3299 - Third Party Advisory |
Information
Published : 2019-03-09 00:29
Updated : 2024-02-04 20:20
NVD link : CVE-2019-9640
Mitre link : CVE-2019-9640
CVE.ORG link : CVE-2019-9640
JSON object : View
Products Affected
redhat
- software_collections
debian
- debian_linux
netapp
- storage_automation_store
canonical
- ubuntu_linux
php
- php
opensuse
- leap
CWE
CWE-125
Out-of-bounds Read