AUGUST 4, 2026
Live Feed
Return to register
Case File

CVE-2019-11047

MEDIUM · CVSS 4.8 EPSS 7.47%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2019-12-23 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE
CVE-2019-11047
Severity
MEDIUM
CVSS
4.8
EPSS
7.47%

Original Filing — NVD Description

When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash.