Description

exif_read_from_impl in ext/exif/exif.c in PHP 7.2.x through 7.2.7 allows attackers to trigger a use-after-free (in exif_read_from_file) because it closes a stream that it is not responsible for closing. The vulnerable code is reachable through the PHP exif_read_data function.

Remediation

References

CVE-2018-12882

Related Vulnerabilities

WordPress 'press-this.php' Multiple Cross-Site Scripting Vulnerabilities (2.0 - 2.5.1)

Oracle JRE CVE-2018-2599 Vulnerability (CVE-2018-2599)

phpMyAdmin Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2016-6619)

XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2021-32621)

PHP Integer Overflow or Wraparound Vulnerability (CVE-2015-8387)

Severity

Critical

Classification

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities CWE-416 CVE-2018-12882