Description
An issue was discovered in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, and 7.2.x before 7.2.8. An Integer Overflow leads to a heap-based buffer over-read in exif_thumbnail_extract of exif.c.
Remediation
References
Related Vulnerabilities
Apache Traffic Server CVE-2015-5206 Vulnerability (CVE-2015-5206)
Drupal Other Vulnerability (CVE-2015-3232)
Joomla! Core 3.x.x Cross-Site Scripting (3.0.0 - 3.9.19)
Dolibarr Incorrect Authorization Vulnerability (CVE-2022-0731)
Magento Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2019-7852)