CVE-2019-11037CWE-787

Out of bounds memory write in PHP Imagick extension

Medium · published May 3, 2019

CVSS v3.0
4.9
EPSS
2%
Percentile
80.3
In the wild
Unconfirmed
What it is

In PHP imagick extension in versions between 3.3.0 and 3.4.4, writing to an array of values in ImagickKernel::fromMatrix() function did not check that the address will be within the allocated array. This could lead to out of bounds write to memory if the function is called with the data controlled by untrusted party.

The record
Technical detail
CVSS v3.0
4.9 · MEDIUM
Vector
CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.01972 · 80.3th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2019-05-03T19:28Z
EPSS history
Timeline
  • 03 MAY 19:28Z
    Out of bounds memory write in PHP Imagick extension
    cvelistv5