Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:21348
HistoryAug 20, 2019 - 12:10 a.m.

Information Disclosure

2019-08-2000:10:43
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12

0.005 Low

EPSS

Percentile

75.9%

php is vulnerable to information disclosure. An uninitialized read in the function exif_process_IFD_in_MAKERNOTE due to mishandling of the data_len variable allows an attacker to read past allocated buffer and potentially obtain confidential information.