Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
PHP Use of Uninitialized Resource Vulnerability - CVE-2019-11038 - Vulnerability Database
PHP

PHP Use of Uninitialized Resource Vulnerability - CVE-2019-11038

Medium
Reference: CVE-2019-11038
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2019-11038
Title: PHP Use of Uninitialized Resource Vulnerability
Overview:

When using the gdImageCreateFromXbm() function in the GD Graphics Library (aka LibGD) 2.2.5 as used in the PHP GD extension in PHP versions 7.1.x below 7.1.30 7.2.x below 7.2.19 and 7.3.x below 7.3.6 it is possible to supply data that will cause the function to use the value of uninitialized variable. This may lead to disclosing contents of the stack that has been left there by previous code.