tocsin

Debian/php7.4: medium 5.4

In PHP versions 7.2.x below 7.2.9, 7.3.x below 7.3.16 and 7.4.x below 7.4.4, while parsing EXIF data with exif_read_data() function, it is possible for malicious data to cause PHP to read one byte of

Action: Upgrade php7.4 to 7.4.5-1 or later.

Affected

introducedfixedlast affected
07.4.5-1-

Fixed versions

7.4.5-1

Sources

published · modified · JSON