PHP up to 7.2.25/7.3.12 EXIF Extension exif_read_data out-of-bounds

Summaryinfo

A vulnerability categorized as critical has been discovered in PHP up to 7.2.25/7.3.12. This impacts the function exif_read_data of the component EXIF Extension. Such manipulation leads to out-of-bounds. This vulnerability is documented as CVE-2019-11050. The attack can be executed remotely. There is not any exploit available. It is advisable to upgrade the affected component.

Detailsinfo

A vulnerability was found in PHP up to 7.2.25/7.3.12 (Programming Language Software) and classified as critical. Affected by this issue is the function exif_read_data of the component EXIF Extension. The manipulation with an unknown input leads to a out-of-bounds vulnerability. Using CWE to declare the problem leads to CWE-125. The product reads data past the end, or before the beginning, of the intended buffer. Impacted is confidentiality, integrity, and availability. CVE summarizes:

When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash.

The weakness was released 12/23/2019. This vulnerability is handled as CVE-2019-11050 since 04/09/2019. The attack may be launched remotely. No form of authentication is required for exploitation. There are known technical details, but no exploit is available.

Upgrading to version 7.2.26, 7.3.13 or 7.4.0 eliminates this vulnerability.

Entries connected to this vulnerability are available at VDB-147595, VDB-147594, VDB-147593 and VDB-147592. Once again VulDB remains the best source for vulnerability data.

Productinfo

Type

• Programming Language Software

Name

• PHP

Version

• 7.2.0
• 7.2.1
• 7.2.2
• 7.2.3
• 7.2.4
• 7.2.5
• 7.2.6
• 7.2.7
• 7.2.8
• 7.2.9
• 7.2.10
• 7.2.11
• 7.2.12
• 7.2.13
• 7.2.14
• 7.2.15
• 7.2.16
• 7.2.17
• 7.2.18
• 7.2.19
• 7.2.20
• 7.2.21
• 7.2.22
• 7.2.23
• 7.2.24
• 7.2.25
• 7.3.0
• 7.3.1
• 7.3.2
• 7.3.3
• 7.3.4
• 7.3.5
• 7.3.6
• 7.3.7
• 7.3.8
• 7.3.9
• 7.3.10
• 7.3.11
• 7.3.12

License

• open-source

Website

• Product: https://www.php.org/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion