« 一覧へ戻る

CVE-2019-11036 Critical

公開: 2019-05-03 / 更新: 2026-06-17 / CVSS: 9.1 / 出典: nvd
製品: PHP

外部リンク: NVD

説明 (原文)

When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.29, 7.2.x below 7.2.18 and 7.3.x below 7.3.5 can be caused to read past allocated buffer in exif_process_IFD_TAG function. This may lead to information disclosure or crash.