CVE-2019-11036
Heap over-read in PHP EXIF extensionWhen processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.29, 7.2.x below 7.2.18 and 7.3.x below 7.3.5 can be caused to read past allocated buffer in exif_process_IFD_TAG function. This may lead to information disclosure or crash.
We have discovered 248,615 live websites that are affected by CVE-2019-11036.
Contact us to get more info
Affected Software
| |
---|
Product | PHP |
Category | Programming Languages |
Vulnerable Versions | - from 7.1 before 7.1.29
- from 7.2 before 7.2.18
- from 7.3 before 7.3.5
|
Total Vulnerable Versions | 507 |
Vulnerable Domains | 248,615 live websites (2.06% of PHP install base) |
Common Weakness Enumeration
CWE-126 Buffer Over-read