CVE-2019-11034 — Out-of-bounds Read in Group PHP

CWE-125 — Out-of-bounds ReadCWE-122 — Heap-based Buffer Overflow9 documents7 sources
Severity
9.1CRITICALNVD
EPSS
2.7%
top 14.01%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
7
PHP Group PHPPHPPhp5+4 more
Timeline
PublishedApr 18
Latest updateMay 24

Description

When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.28, 7.2.x below 7.2.17 and 7.3.x below 7.3.4 can be caused to read past allocated buffer in exif_process_IFD_TAG function. This may lead to information disclosure or crash.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:HExploitability: 3.9 | Impact: 5.2

Affected Packages5 packages

▶NVDphp/php7.1.0 — 7.1.28+2
▶CVEListV5php_group/php7.1.x — 7.1.28+2
▶Ubuntuphp5/php5< 5.5.9+dfsg-1ubuntu4.29+esm1
▶NVDopensuse/leap15.0, 15.1, 42.3+2

Also affects: Debian Linux 8.0, 9.0, Ubuntu Linux 12.04, 14.04, 16.04, 18.04, 18.10, 19.04

Patches

Patch: bugs.php.net ↗Patch: bugs.php.net ↗

🔴Vulnerability Details

3
GHSA
GHSA-x3rx-2m8v-q2vm: When processing certain files, PHP EXIF extension in versions 7↗2022-05-24
▶
CVEList
Heap over-read in PHP EXIF extension↗2019-04-18
▶
OSV
CVE-2019-11034: When processing certain files, PHP EXIF extension in versions 7↗2019-04-17
▶

📋Vendor Advisories

3
Ubuntu
PHP vulnerabilities↗2019-05-01
▶
Ubuntu
PHP vulnerabilities↗2019-04-23
▶
Red Hat
php: Heap buffer overflow in function exif_process_IFD_TAG()↗2019-03-16
▶

💬Community

2
Bugzilla
CVE-2019-11034 php: Heap buffer overflow in function exif_process_IFD_TAG()↗2019-04-23
▶
Bugzilla
CVE-2019-11034 CVE-2019-11035 php: various flaws [fedora-all]↗2019-04-23
▶
CVE-2019-11034 — Out-of-bounds Read in PHP Group PHP | cvebase