CVE-2016-4544

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.5.35 PHP versions 5.6.x prior to 5.6.21 PHP versions 7.x prior to 7.0.6

Description The issue is caused by a buffer overflow in the exif process TIFF in JPEG function. This can be exploited by a remote attacker using specially crafted header data, potentially leading to a denial of service or other unspecified impacts, such as out-of-bounds memory reading.

Recommendations For PHP versions prior to 5.5.35, update to version 5.5.35 or later. For PHP versions 5.6.x prior to 5.6.21, update to version 5.6.21 or later. For PHP versions 7.x prior to 7.0.6, update to version 7.0.6 or later. As a temporary workaround, consider disabling the exif process TIFF in JPEG function until a patch is available.