QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2018-12882

Back to search

CVE-2018-12882

Published: Jun 26, 2018

Modified: Aug 5, 2024

PUBLISHED

Description

exif_read_from_impl in ext/exif/exif.c in PHP 7.2.x through 7.2.7 allows attackers to trigger a use-after-free (in exif_read_from_file) because it closes a stream that it is not responsible for closing. The vulnerable code is reachable through the PHP exif_read_data function.

VendorProductVersions

n/a

n/a

affected
n/a

References

104551
vdb-entry
x_refsource_BID
USN-3702-2
vendor-advisory
x_refsource_UBUNTU
USN-3702-1
vendor-advisory
x_refsource_UBUNTU

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now