UpHeron
All vulnerabilities

Servers and applications

CVE-2019-11034

When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.28, 7.2.x below 7.2.17 and 7.3.x below 7.3.4 can be caused to read past allocated buffer in exif_process_IFD_TAG function. This may lead to information disclosure or crash.

Severity
Critical 9.1
Published
18 Apr 2019
Last changed
17 Jun 2026
Added to UpHeron
14 Oct 2026
Fixed in
7.1.28, 7.2.17, 7.3.4
Sources
NVD

Affected software

SoftwareAffected versions
PHPServers and applications · cpe:a:php:php
  • From 7.1.0 before 7.1.28
  • From 7.2.9 before 7.2.17
  • From 7.3.0 before 7.3.4

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2019-11034
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2019-11034