CVE-2019-11042

Published: Aug 9, 2019Modified: Jun 17, 2026

7.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H

Exploitability: 2.8 / Impact: 4.2

Source: NVD

Description

When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.1.x below 7.1.31, 7.2.x below 7.2.21 and 7.3.x below 7.3.8 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash.

Affected (15)

Products: Php: Php · Debian: Debian Linux · Canonical: Ubuntu Linux · +4 more

Show all products

Php: Php · Debian: Debian Linux · Canonical: Ubuntu Linux · Apple: Mac Os X · Opensuse: Leap · Redhat: Software Collections · Tenable: Tenable.sc

1 product

1 product

1 product

1 product

1 product

1 product

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Php Php	From 7.1.0 to 7.1.31
Php Php	From 7.2.0 to 7.2.21
Php Php	From 7.3.0 to 7.3.8

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 10.0
Debian Debian Linux	Version 8.0
Debian Debian Linux	Version 9.0

Configuration C

5 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 12.04
Canonical Ubuntu Linux	Version 14.04
Canonical Ubuntu Linux	Version 16.04
Canonical Ubuntu Linux	Version 18.04
Canonical Ubuntu Linux	Version 19.04

Configuration D

1 vulnerable

Vulnerable Software	Affected Versions
Apple Mac Os X	Before 10.15.1

Configuration E

1 vulnerable

Vulnerable Software	Affected Versions
Opensuse Leap	Version 15.0

Configuration F

1 vulnerable

Vulnerable Software	Affected Versions
Redhat Software Collections	Version 1.0

Configuration G

1 vulnerable

Vulnerable Software	Affected Versions
Tenable Tenable.sc	Before 5.19.0

Related CWEs

CWE-125

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

References (34)

http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00019.html

Source: security@php.net

Third Party Advisory

http://seclists.org/fulldisclosure/2019/Oct/15

Source: security@php.net

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2019/Oct/55

Source: security@php.net

Mailing ListThird Party Advisory

https://access.redhat.com/errata/RHSA-2019:3299

Source: security@php.net

Third Party Advisory

https://bugs.php.net/bug.php?id=78256

Source: security@php.net

ExploitPatchVendor Advisory

https://lists.debian.org/debian-lts-announce/2019/08/msg00010.html

Source: security@php.net

Mailing ListThird Party Advisory

https://seclists.org/bugtraq/2019/Oct/9

Source: security@php.net

Mailing ListThird Party Advisory

https://seclists.org/bugtraq/2019/Sep/35

Source: security@php.net

Mailing ListThird Party Advisory

https://seclists.org/bugtraq/2019/Sep/38

Source: security@php.net

Mailing ListThird Party Advisory

https://security.netapp.com/advisory/ntap-20190822-0003/

Source: security@php.net

Third Party Advisory

https://support.apple.com/kb/HT210634

Source: security@php.net

Third Party Advisory

https://support.apple.com/kb/HT210722

Source: security@php.net

Third Party Advisory

https://usn.ubuntu.com/4097-1/

Source: security@php.net

Third Party Advisory

https://usn.ubuntu.com/4097-2/

Source: security@php.net

Third Party Advisory

https://www.debian.org/security/2019/dsa-4527

Source: security@php.net

Third Party Advisory

https://www.debian.org/security/2019/dsa-4529

Source: security@php.net

Third Party Advisory

https://www.tenable.com/security/tns-2021-14

Source: security@php.net

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00019.html