When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
History
07 Nov 2023, 03:02
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
20 Dec 2022, 22:05
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
First Time |
Tenable securitycenter
Tenable |
|
CPE | cpe:2.3:a:tenable:securitycenter:*:*:*:*:*:*:*:* cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:* |
30 Jan 2021, 02:34
Type | Values Removed | Values Added |
---|---|---|
References | (BUGTRAQ) https://seclists.org/bugtraq/2021/Jan/3 - Mailing List, Third Party Advisory |
17 Jan 2021, 04:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
Information
Published : 2019-12-23 03:15
Updated : 2023-12-10 13:13
NVD link : CVE-2019-11050
Mitre link : CVE-2019-11050
CVE.ORG link : CVE-2019-11050
JSON object : View
Products Affected
php
- php
opensuse
- leap
debian
- debian_linux
canonical
- ubuntu_linux
tenable
- securitycenter
fedoraproject
- fedora
CWE
CWE-125
Out-of-bounds Read