Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: PHP — USN-3953-2 Clear all filters
TI-2019-08251 CVE-2019-11035 · GHSA-82xj-4wm9-29x6

Heap over-read in PHP EXIF extension

Priority MEDIUM 46

When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.28, 7.2.x below 7.2.17 and 7.3.x below 7.3.4 can be caused to read past allocated buffer in exif_iif_add_value function.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.04409 Published 2019-04-18 Partial fix · 7.1.28, 7.2.17 +1 CWE-125
TI-2019-08250 CVE-2019-11034 · GHSA-x3rx-2m8v-q2vm

Heap over-read in PHP EXIF extension

Priority MEDIUM 46

When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.28, 7.2.x below 7.2.17 and 7.3.x below 7.3.4 can be caused to read past allocated buffer in exif_process_IFD_TAG function.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.04094 Published 2019-04-18 Partial fix · 7.1.28, 7.2.17 +1 CWE-125