title: heap-buffer-overflow on exif_scan_thumbnail in EXIF extension
description: When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.1.x below 7.1.31, 7.2.x below 7.2.21 and 7.3.x below 7.3.8 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash.
problem types: CWE-125 Out-of-bounds Read
affected:
{
product: PHP
vendor: PHP Group
versions:
status: affected, version: 7.1.x below 7.1.31
status: affected, version: 7.2.x below 7.2.21
status: affected, version: 7.3.x below 7.3.8
}
metrics:
cvssV3_0: [
attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 4.8
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L
version: 3.0
]