Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

TI-2019-08256 CVE-2019-11040 · GHSA-9mjv-243x-3w2q

Heap buffer overflow in EXIF extension

Priority MEDIUM 46

When PHP EXIF extension is parsing EXIF information from an image, e.g.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.04068 Published 2019-06-18 Partial fix CWE-125
TI-2019-08255 CVE-2019-11039 · GHSA-fc8g-9mgh-947m

Out-of-bounds read in iconv.c

Priority MEDIUM 45

Function iconv_mime_decode_headers() in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 may perform out-of-buffer read due to integer overflow when parsing MIME headers.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.0313 Published 2019-06-18 Partial fix CWE-125