Lucene search

K
osvGoogleOSV:CVE-2018-10549
HistoryApr 29, 2018 - 9:29 p.m.

CVE-2018-10549

2018-04-2921:29:00
Google
osv.dev
13

AI Score

8.9

Confidence

High

EPSS

0.008

Percentile

81.5%

An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. exif_read_data in ext/exif/exif.c has an out-of-bounds read for crafted JPEG data because exif_iif_add_value mishandles the case of a MakerNote that lacks a final ‘\0’ character.