NetSight
IP …
critical9.8

CVE-2019-9641

An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3.

Impact

An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exif_process_IFD_in_TIFF.

Affected products

VendorProductAffected versions
PhpPhp
before 7.1.27
from 7.2.0 before 7.2.16
from 7.3.0 before 7.3.3
DebianDebian Linux
Versions 8.0, 9.0
CanonicalUbuntu Linux
Versions 12.04, 14.04, 16.04, 18.04, 18.10
OpensuseLeap
Versions 15.0, 15.1, 42.3
NetappStorage Automation Store
All versions

Weakness classification

CWE-908

References