CVE-2019-11040
Heap buffer overflow in EXIF extension
At a glance Severity MEDIUM 4.8 EPSS EPSS 4.07 % · percentile 91 (2026-10-27) State PUBLISHED Published 2019-06-18 Updated 2024-09-16 Assigner php NVD status Modified Description When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash.
Scores Version Score Vector Scored by CVSS 3.0 MEDIUM 4.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L php CVSS 3.1 CRITICAL 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H NVD · nvd@nist.gov (Primary) CVSS 3.0 MEDIUM 4.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L NVD · security@php.net (Secondary) CVSS 2.0 MEDIUM 6.4 AV:N/AC:L/Au:N/C:P/I:N/A:P NVD · nvd@nist.gov (Primary)
Weaknesses (CWE)
European references
CERT-FR advisories
Affected configurations (NVD CPE) cpe:2.3:a:php:php:*:*:*:*:*:*:*:* ≥ 7.1.0 < 7.1.30cpe:2.3:a:php:php:*:*:*:*:*:*:*:* ≥ 7.2.0 < 7.2.19cpe:2.3:a:php:php:*:*:*:*:*:*:*:* ≥ 7.3.0 < 7.3.6cpe:2.3:a:redhat:software_collections:1.0:*:*:*:*:*:*:*cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*Affected products Product Versions PHP Group · PHP affected 7.1.30 ; affected 7.2.19 ; affected 7.3.6
References
Sources
