AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2019-11041

HIGH · CVSS 7.1 EPSS 4.42%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2019-08-09 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2019-11041
Severity
HIGH
CVSS
7.1
EPSS
4.42%

Original NVD Description

When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.1.x below 7.1.31, 7.2.x below 7.2.21 and 7.3.x below 7.3.8 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash.