| Package | Affected versions | Patched versions |
|---|---|---|
| php | ≥ 7.1.0, < 7.1.29≥ 7.2.0, < 7.2.18≥ 7.3.0, < 7.3.5 | 7.1.297.2.187.3.5 |
| software collections | = 1.0 |
When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.29, 7.2.x below 7.2.18 and 7.3.x below 7.3.5 can be caused to read past allocated buffer in exif_process_IFD_TAG function. This may lead to information disclosure or crash.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free