CVE-2022-31630

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-31630
In PHP versions prior to 7.4.33, 8.0.25 and 8.1.12, when using imageloadfont() function in gd extension, it is possible to supply a specially crafted font file, such as if the loaded font is used with imagechar() function, the read outside allocated buffer will be used. This can lead to crashes or disclosure of confidential information. 

7.1 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.2

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://bugs.php.net/bug.php?id=81739 Exploit Issue Tracking Patch Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:php:php:*:*:*:*:*:*:*:*
cpe:2.3:a:php:php:*:*:*:*:*:*:*:*
cpe:2.3:a:php:php:*:*:*:*:*:*:*:*
History

02 Apr 2024, 03:15

Type Values Removed Values Added
Summary (en) In PHP versions prior to 7.4.33, 8.0.25 and 8.2.12, when using imageloadfont() function in gd extension, it is possible to supply a specially crafted font file, such as if the loaded font is used with imagechar() function, the read outside allocated buffer will be used. This can lead to crashes or disclosure of confidential information.  (en) In PHP versions prior to 7.4.33, 8.0.25 and 8.1.12, when using imageloadfont() function in gd extension, it is possible to supply a specially crafted font file, such as if the loaded font is used with imagechar() function, the read outside allocated buffer will be used. This can lead to crashes or disclosure of confidential information. 

07 Nov 2023, 03:47

Type Values Removed Values Added
Summary In PHP versions prior to 7.4.33, 8.0.25 and 8.2.12, when using imageloadfont() function in gd extension, it is possible to supply a specially crafted font file, such as if the loaded font is used with imagechar() function, the read outside allocated buffer will be used. This can lead to crashes or disclosure of confidential information. In PHP versions prior to 7.4.33, 8.0.25 and 8.2.12, when using imageloadfont() function in gd extension, it is possible to supply a specially crafted font file, such as if the loaded font is used with imagechar() function, the read outside allocated buffer will be used. This can lead to crashes or disclosure of confidential information. 

16 Nov 2022, 18:26

Type Values Removed Values Added
First Time Php
Php php
CPE cpe:2.3:a:php:php:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.1
References (MISC) https://bugs.php.net/bug.php?id=81739 - (MISC) https://bugs.php.net/bug.php?id=81739 - Exploit, Issue Tracking, Patch, Vendor Advisory
CWE CWE-125

14 Nov 2022, 07:15

Type Values Removed Values Added
New CVE
Information

Published : 2022-11-14 07:15

Updated : 2024-04-02 03:15

NVD link : CVE-2022-31630

Mitre link : CVE-2022-31630

CVE.ORG link : CVE-2022-31630

JSON object : View

Products Affected

php

  • php
CWE
CWE-125

Out-of-bounds Read

CWE-131

Incorrect Calculation of Buffer Size

CWE-190

Integer Overflow or Wraparound