CVE-2019-11035
Heap over-read in PHP EXIF extension
- State
- Published
- Severity
- 4.8 Medium
- Published
- Apr 18, 2019
- Updated
- Sep 17, 2024
- Reserved
- Apr 9, 2019
Description
When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.28, 7.2.x below 7.2.17 and 7.3.x below 7.3.4 can be caused to read past allocated buffer in exif_iif_add_value function. This may lead to information disclosure or crash.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.0 | 4.8 Medium | CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L | php |
Weaknesses
- CWE-125 Out-of-bounds Read
Affected Products
| Product | Versions |
|---|---|
PHPPHP Group |
|
References
- https://bugs.php.net/bug.php?id=77831
- USN-3953-1vendor-advisory
- USN-3953-2vendor-advisory
- https://security.netapp.com/advisory/ntap-20190502-0001/
- https://support.f5.com/csp/article/K44590877
- [debian-lts-announce] 20190525 [SECURITY] [DLA 1803-1] php5 security updatemailing-list
- openSUSE-SU-2019:1501vendor-advisory
- openSUSE-SU-2019:1503vendor-advisory
- openSUSE-SU-2019:1572vendor-advisory
- openSUSE-SU-2019:1573vendor-advisory
- RHSA-2019:2519vendor-advisory
- DSA-4529vendor-advisory
- 20190923 [SECURITY] [DSA 4529-1] php7.0 security updatemailing-list
- RHSA-2019:3299vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.