CVE-2018-14851

exif_process_IFD_in_MAKERNOTE in ext/exif/exif.c in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, and 7.2.x before 7.2.8 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted JPEG file.

We have discovered 83,491 live websites that are affected by CVE-2018-14851.

Run a Free Instant Scan



Affected Software

Product  PHP
Category Programming Languages
Vulnerable Domains83,491 live websites (1.21% of PHP install base)
Vulnerable Versions
  • from 7 through 7.0.31
  • from 7.1 through 7.1.20
  • from 7.2 through 7.2.8
Vulnerable Versions Count59 versions ( 11% of all versions)



Details

  • Published - Aug 2, 2018
  • Updated - Aug 5, 2024

Website Distribution by Country

Number of websites using CVE-2018-14851
United States6,306 websites


France38,171 websites
Netherlands8,576 websites
China6,006 websites
Japan4,649 websites
Poland1,966 websites
Germany1,772 websites
Russia1,482 websites
Italy1,235 websites
Spain1,106 websites

Website Distribution by TLD

Number of websites using CVE-2018-14851
.com31,680 websites
.fr15,902 websites
.nl6,979 websites
.be2,494 websites
.net2,360 websites
.org2,300 websites
.pl1,918 websites
.cn1,286 websites
.de1,270 websites
.it1,242 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2018-14851

Top websites that are affected by CVE-2018-14851. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
*********.com China*,***
******.com China*,***
*****.**.com China*,***
*****.org United States*,***
********.com United States*,***
***********.com United States**,***
*****.***.tr Turkey**,***
********.com France**,***
********.com France**,***
****.org United States**,***
See full domain list

FAQ

A total of 83,491 websites have been identified as vulnerable to CVE-2018-14851, based on global website indexing conducted by WebTechSurvey.
The PHP is affected by the CVE-2018-14851 vulnerability.
PHP versions up to 7.2.8 are vulnerable to CVE-2018-14851.
CVE-2018-14851 is resolved in version 7.2.8 of PHP.