Lucene search

K
redhatcveRedhat.comRH:CVE-2016-7128
HistorySep 09, 2016 - 1:19 p.m.

CVE-2016-7128

2016-09-0913:19:19
redhat.com
access.redhat.com
13

0.005 Low

EPSS

Percentile

75.3%

The exif_process_IFD_in_TIFF function in ext/exif/exif.c in PHP before 5.6.25 and 7.x before 7.0.10 mishandles the case of a thumbnail offset that exceeds the file size, which allows remote attackers to obtain sensitive information from process memory via a crafted TIFF image.