Description
exif_process_IFD_in_MAKERNOTE in ext/exif/exif.c in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, and 7.2.x before 7.2.8 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted JPEG file.
Remediation
References
Related Vulnerabilities
WordPress Plugin Extensive VC Addons for WPBakery page builder Local File Inclusion (1.9)
WordPress Plugin LayerSlider Cross-Site Request Forgery (4.6.1)
WordPress Plugin WP-Cron Dashboard Cross-Site Scripting (1.1.5)
WordPress Plugin WP Photo Album Plus 'wppa-album' Parameter SQL Injection (4.1.1)
Internet Information Services Other Vulnerability (CVE-1999-1544)