CVE-2016-4542

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.5.35 PHP versions 5.6.x prior to 5.6.21 PHP versions 7.x prior to 7.0.6

Description The issue arises from the improper construction of spprintf arguments in the exif process IFD TAG function, allowing remote attackers to cause a denial of service (out-of-bounds read) or possibly have other unspecified impacts via crafted header data.

Recommendations For PHP versions prior to 5.5.35, update to version 5.5.35 or later. For PHP versions 5.6.x prior to 5.6.21, update to version 5.6.21 or later. For PHP versions 7.x prior to 7.0.6, update to version 7.0.6 or later.