Description

An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exif_process_IFD_in_TIFF.

Remediation

References

CVE-2019-9641

Related Vulnerabilities

Apache Traffic Server Improper Input Validation Vulnerability (CVE-2010-2952)

WordPress Plugin Modula Image Gallery Cross-Site Scripting (1.3.5)

MySQL CVE-2018-3285 Vulnerability (CVE-2018-3285)

WordPress Plugin My Wish List Cross-Site Scripting (1.4.1)

WordPress Plugin Captcha by BestWebSoft Multiple Cross-Site Scripting Vulnerabilities (4.1.5)

Severity

Critical

Classification

CVE-2019-9641 CWE-119 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities