CVE-2018-12882

Name of the Vulnerable Software and Affected Versions PHP versions 7.2.x through 7.2.7

Description The issue allows attackers to trigger a use-after-free in the exif read from file function because it closes a stream that it is not responsible for closing. This is reachable through the PHP exif read data function.

Recommendations For PHP versions 7.2.x through 7.2.7, consider updating to a version where this issue is resolved, as the current version allows for a use-after-free exploit through the exif read data function. At the moment, there is no information about a newer version that contains a fix for this vulnerability.