CVE-2019-9639

An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3

published March 8, 2019

CVSS
—
EPSS
8%
Percentile
94.9
In the wild
Unconfirmed
What it is

An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exif_process_IFD_in_MAKERNOTE because of mishandling the data_len variable.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.08202 · 94.9th percentile
Published
2019-03-08T23:00Z
EPSS history
Timeline
  • 08 MAR 23:00Z
    An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3
    cvelistv5