NetSight
IP …
high7.5

CVE-2018-14883

An issue was discovered in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, and 7.2.x before 7.2.8.

Impact

An issue was discovered in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, and 7.2.x before 7.2.8. An Integer Overflow leads to a heap-based buffer over-read in exif_thumbnail_extract of exif.c.

Affected products

VendorProductAffected versions
PhpPhp
before 5.6.37
from 7.0.0 before 7.0.31
from 7.1.0 before 7.1.20
from 7.2.0 before 7.2.8
CanonicalUbuntu Linux
Versions 12.04, 14.04, 16.04, 18.04
DebianDebian Linux
Versions 8.0, 9.0
NetappStorage Automation Store
All versions

Weakness classification

CWE-125CWE-190

References