NetSight
IP …
high7.5

CVE-2019-9638

An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3.

Impact

An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exif_process_IFD_in_MAKERNOTE because of mishandling the maker_note->offset relationship to value_len.

Affected products

VendorProductAffected versions
PhpPhp
before 7.1.27
from 7.2.0 before 7.2.16
from 7.3.0 before 7.3.3
DebianDebian Linux
Versions 8.0, 9.0
CanonicalUbuntu Linux
Versions 12.04, 14.04, 16.04, 18.04, 18.10
OpensuseLeap
Versions 15.0, 15.1, 42.3
NetappStorage Automation Store
All versions
RedhatSoftware Collections
Version 1.0

Weakness classification

CWE-125

References