php: Wrong calculation in exif_convert_any_to_int function

It was found that the exifconvertanytoint function in PHP was vulnerable to floating point exceptions when parsing tags in image files. A remote attacker with the ability to upload a malicious image could crash PHP, causing a Denial of Service...

PHP out-of-bounds read vulnerability (CNVD-2018-09229)

PHP PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. The language is mainly used for Web development and supports a variety of databases and operating systems. A security vulnerability exists in th...

UBUNTU-CVE-2018-10549

An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. exifreaddata in ext/exif/exif.c has an out-of-bounds read for crafted JPEG data because exifiifaddvalue mishandles the case of a MakerNote that lacks a final '\0' character...

PT-2018-3141

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.6.36 PHP versions 7.0.x prior to 7.0.30 PHP versions 7.1.x prior to 7.1.17 PHP versions 7.2.x prior to 7.2.5 Description The issue is related to the exif read data function in the PHP interpreter, which is associated wi...

CVE-2016-10480

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 835,...

Integer overflow

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 835,...

CVE-2016-10480

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 835,...

CVE-2016-10480

CVE-2016-10480: Android Qualcomm-exif memory corruption due to invalid integer overflow checks in exif parsing, affecting numerous Snapdragon/mobile/wear platforms prior to 2018-04 patch levels. Impact described as memory corruption with high/critical severity in CVSS assessments. Patches exist i...

CVE-2016-10480: Integer Overflow or Wraparound

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 835,...

PT-2018-3986

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a missing bounds check in the exif entry get value function of the exif-entry.c component, which can lead to an out of bounds read. This could result in local information disclosu...

PT-2018-1210

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 Description The issue is caused by an integer overflow in EXIF parsing, potentially leading to memory corruption. This could allow a remote attacker to impact the confidentiality, integrity, and availabilit...

[SECURITY] Fedora 26 Update: jhead-3.00-7.fc26

Jhead displays and manipulates the non-image portions of EXIF formatted JPEG images, such as the images produced by most digital cameras...

Solaris 10 (sparc) : 121095-05

GNOME 2.6.0: GNOME EXIF tag parsing library for digital cameras. Date this patch was last updated by Sun : Feb/11/16 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Solaris 10 (x86) : 121096-04

GNOME 2.6.0x86: GNOME EXIF tag parsing library for digital camera. Date this patch was last updated by Sun : Jul/11/13 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

[SECURITY] Fedora 27 Update: jhead-3.00-7.fc27

Jhead displays and manipulates the non-image portions of EXIF formatted JPEG images, such as the images produced by most digital cameras...

jhead 'process_EXIF' Function Integer Overflow Vulnerability Vulnerability

jhead is a tool for modifying JPEG file information. An integer overflow vulnerability exists in the 'processEXIF' function of the exif.c file in jhead version 3.00. A remote attacker can exploit this vulnerability to cause a denial of service with a malicious JPEG file...

DEBIAN-CVE-2018-6612

An integer underflow bug in the processEXIF function of the exif.c file of jhead 3.00 raises a heap-based buffer over-read when processing a malicious JPEG file, which may allow a remote attacker to cause a denial-of-service attack or unspecified other impact...

UBUNTU-CVE-2018-6612

An integer underflow bug in the processEXIF function of the exif.c file of jhead 3.00 raises a heap-based buffer over-read when processing a malicious JPEG file, which may allow a remote attacker to cause a denial-of-service attack or unspecified other impact...

[SECURITY] Fedora 26 Update: libexif-0.6.21-14.fc26

Most digital cameras produce EXIF files, which are JPEG files with extra tags that contain information about the image. The EXIF library allows you to parse an EXIF file and read the data from those tags...

[SECURITY] Fedora 27 Update: libexif-0.6.21-14.fc27

Most digital cameras produce EXIF files, which are JPEG files with extra tags that contain information about the image. The EXIF library allows you to parse an EXIF file and read the data from those tags...