PT-2019-5433

CVE-2019-9640

·

Published

2019-03-08

·

Updated

2026-10-20

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions PHP versions prior to 7.1.27 PHP versions 7.2.x prior to 7.2.16 PHP versions 7.3.x prior to 7.3.3
Description An issue was discovered in the EXIF component, specifically an Invalid Read in the exif process SOFn function. This issue is related to a buffer overflow in memory, which could allow a remote attacker to gain unauthorized access to protected information.
Recommendations For PHP versions prior to 7.1.27, update to version 7.1.27 or later. For PHP versions 7.2.x prior to 7.2.16, update to version 7.2.16 or later. For PHP versions 7.3.x prior to 7.3.3, update to version 7.3.3 or later.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Related identifiers
ALSA-2020:1624
ALT-PU-2019-1396
CESA-2020_1624
CLSA-2026-1787229717
DLA-1741-1
DSA-4403-1
OPENSUSE-SU-2019_1293-1
OPENSUSE-SU-2019_1503-1
OPENSUSE-SU-2019:1572-1
OPENSUSE-SU-2019_1572-1
OPENSUSE-SU-2019:1573-1
OPENSUSE-SU-2019_1573-1
OPENSUSE-SU-2022_4067-1
OPENSUSE-SU-2024:11167-1
OPENSUSE-SU-2024:11169-1
RHSA-2019:2519
RHSA-2019:3299
RHSA-2020:1624
RHSA-2020_1624
RLSA-2020:1624
SUSE-SU-2019:0988-1
SUSE-SU-2019:1325-1
SUSE-SU-2019:14013-1
SUSE-SU-2019_14013-1
SUSE-SU-2019:1461-1
SUSE-SU-2019_1461-1
SUSE-SU-2022:4067-1
USN-3922-1
USN-3922-2
USN-3922-3
Found an issue in the description? Have something to add? Feel free to write us 👾