NetSight
IP …
high7.5

CVE-2019-9639

An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3.

Impact

An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exif_process_IFD_in_MAKERNOTE because of mishandling the data_len variable.

Affected products

VendorProductAffected versions
PhpPhp
before 7.1.27
from 7.2.0 before 7.2.16
from 7.3.0 before 7.3.3
DebianDebian Linux
Versions 8.0, 9.0
CanonicalUbuntu Linux
Versions 12.04, 14.04, 16.04, 18.04, 18.10
OpensuseLeap
Versions 15.0, 15.1, 42.3
NetappStorage Automation Store
All versions
RedhatSoftware Collections
Version 1.0

Weakness classification

CWE-908CWE-909

References