PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability - CVE-2019-9639 - Vulnerability Database

PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability - CVE-2019-9639

High
Reference: CVE-2019-9639
Title: PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
Overview:

An issue was discovered in the EXIF component in PHP before 7.1.27 7.2.x before 7.2.16 and 7.3.x before 7.3.3. There is an uninitialized read in exif_process_IFD_in_MAKERNOTE because of mishandling the data_len variable.