CVE-2019-11036

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2019-11036
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-11036.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2019-11036
Downstream
Related
Published
2019-05-03T20:29:00.357Z
Modified
2026-02-05T06:43:53.210301Z
Severity
  • 9.1 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H CVSS Calculator
Summary
[none]
Details

When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.29, 7.2.x below 7.2.18 and 7.3.x below 7.3.5 can be caused to read past allocated buffer in exifprocessIFD_TAG function. This may lead to information disclosure or crash.

References

Affected packages

Git / github.com/php/php-src

Affected ranges

Type
GIT
Repo
https://github.com/php/php-src
Events
Introduced
0221e9f827632942225586687a33cfd554860d5e
Fixed
1888e8141b865aab006feebbb7be559fc0fab811
Introduced
52ace952a1b65ca80fc2617f11c2fa6dd03f51bd
Fixed
2c882aa43cdbc36540be13faed178b03e112a8ec
Introduced
8148cbb78841c8ec0759c0836e7f35dec799d300
Fixed
b0edc17f328763c8cd3ef8e83ddd33dc9898dcfe

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-11036.json"