CVE-2019-11036

Heap over-read in PHP EXIF extension

State: Published
Severity: 4.8 Medium
Published: May 3, 2019
Updated: Sep 16, 2024
Reserved: Apr 9, 2019

Description

When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.29, 7.2.x below 7.2.18 and 7.3.x below 7.3.5 can be caused to read past allocated buffer in exif_process_IFD_TAG function. This may lead to information disclosure or crash.

Scores

CVSS	Score	Vector	Source
3.0	4.8 Medium	CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L	php

Weaknesses

CWE-126 Buffer Over-read

Affected Products

Product	Versions
PHPPHP Group	7.1.x to before 7.1.29Affected 7.2.x to before 7.2.18Affected 7.3.x to before 7.3.5Affected

References

https://bugs.php.net/bug.php?id=77950
108177vdb-entry
FEDORA-2019-6350c4e21avendor-advisory
FEDORA-2019-6e325234a4vendor-advisory
FEDORA-2019-bab3944feevendor-advisory
https://security.netapp.com/advisory/ntap-20190517-0003/
USN-3566-2vendor-advisory
[debian-lts-announce] 20190525 [SECURITY] [DLA 1803-1] php5 security updatemailing-list
openSUSE-SU-2019:1501vendor-advisory
openSUSE-SU-2019:1503vendor-advisory
USN-4009-1vendor-advisory
openSUSE-SU-2019:1572vendor-advisory
openSUSE-SU-2019:1573vendor-advisory
RHSA-2019:2519vendor-advisory
20190920 [SECURITY] [DSA 4527-1] php7.3 security updatemailing-list
DSA-4527vendor-advisory
DSA-4529vendor-advisory
20190923 [SECURITY] [DSA 4529-1] php7.0 security updatemailing-list
RHSA-2019:3299vendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.