Lucene search

K
cvelistPhpCVELIST:CVE-2020-7064
HistoryFeb 17, 2020 - 12:00 a.m.

CVE-2020-7064 Use-of-uninitialized-value in exif

2020-02-1700:00:00
CWE-125
php
raw.githubusercontent.com
4

5.3 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.3%

In PHP versions 7.2.x below 7.2.9, 7.3.x below 7.3.16 and 7.4.x below 7.4.4, while parsing EXIF data with exif_read_data() function, it is possible for malicious data to cause PHP to read one byte of uninitialized memory. This could potentially lead to information disclosure or crash.