An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an Invalid Read in exifprocessSOFn.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-9640.json"