| Package | Affected versions | Patched versions |
|---|---|---|
| php | ≥ 7.1.0, < 7.1.28≥ 7.2.9, < 7.2.17≥ 7.3.0, < 7.3.4 | 7.1.287.2.177.3.4 |
| software collections | = 1.0 |
When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.28, 7.2.x below 7.2.17 and 7.3.x below 7.3.4 can be caused to read past allocated buffer in exif_iif_add_value function. This may lead to information disclosure or crash.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free