Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
PHP Out-of-bounds Read Vulnerability - CVE-2022-31630 - Vulnerability Database
PHP

PHP Out-of-bounds Read Vulnerability - CVE-2022-31630

High
Reference: CVE-2022-31630
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2022-31630
Title: PHP Out-of-bounds Read Vulnerability
Overview:

In PHP versions prior to 7.4.33 8.0.25 and 8.2.12 when using imageloadfont() function in gd extension it is possible to supply a specially crafted font file such as if the loaded font is used with imagechar() function the read outside allocated buffer will be used. This can lead to crashes or disclosure of confidential information.