When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.1.x below 7.1.31, 7.2.x below 7.2.21 and 7.3.x below 7.3.8 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
Configuration 5 (hide)
|
Configuration 6 (hide)
|
Configuration 7 (hide)
|
History
28 Feb 2023, 15:13
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:tenable:tenable.sc:*:*:*:*:*:*:*:* | |
References |
|
|
First Time |
Tenable tenable.sc
Tenable |
Information
Published : 2019-08-09 20:15
Updated : 2023-12-10 12:59
NVD link : CVE-2019-11041
Mitre link : CVE-2019-11041
CVE.ORG link : CVE-2019-11041
JSON object : View
Products Affected
debian
- debian_linux
php
- php
apple
- mac_os_x
redhat
- software_collections
tenable
- tenable.sc
opensuse
- leap
canonical
- ubuntu_linux
CWE
CWE-125
Out-of-bounds Read