NetSight
IP …
high7.5

CVE-2019-9640

An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3.

Impact

An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an Invalid Read in exif_process_SOFn.

Affected products

VendorProductAffected versions
PhpPhp
from 7.1.0 before 7.1.27
from 7.2.0 before 7.2.16
from 7.3.0 before 7.3.3
CanonicalUbuntu Linux
Versions 12.04, 14.04, 16.04, 18.04, 18.10
DebianDebian Linux
Versions 8.0, 9.0
OpensuseLeap
Versions 15.0, 15.1, 42.3
NetappStorage Automation Store
All versions
RedhatSoftware Collections
Version 1.0

Weakness classification

CWE-125

References