Lucene search

K
osvGoogleOSV:CVE-2019-11034
HistoryApr 18, 2019 - 5:29 p.m.

CVE-2019-11034

2019-04-1817:29:00
Google
osv.dev
5

6.5 Medium

AI Score

Confidence

Low

0.014 Low

EPSS

Percentile

86.6%

When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.28, 7.2.x below 7.2.17 and 7.3.x below 7.3.4 can be caused to read past allocated buffer in exif_process_IFD_TAG function. This may lead to information disclosure or crash.