CVE-2016-4543

critical · 9.8

The exif_process_IFD_in_JPEG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 does not validate IFD sizes, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via crafted header data.

9.8

CVSS

12.2%

EPSS (exploit prob.)

96th

EPSS percentile

2016-05-22

Published

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-119

Affected products

Vendor	Product	Affected versions
hp	system_management_homepage	<= 7.5.5.6
php	php	<= 5.5.34
php	php	5.6.0
php	php	5.6.1
php	php	5.6.2
php	php	5.6.3
php	php	5.6.4
php	php	5.6.5
php	php	5.6.6
php	php	5.6.7
php	php	5.6.8
php	php	5.6.9
php	php	5.6.10
php	php	5.6.11
php	php	5.6.12
php	php	5.6.13
php	php	5.6.14
php	php	5.6.15
php	php	5.6.16
php	php	5.6.17
php	php	5.6.18
php	php	5.6.19
php	php	5.6.20
php	php	7.0.0
php	php	7.0.1
php	php	7.0.2
php	php	7.0.3
php	php	7.0.4
php	php	7.0.5
fedoraproject	fedora	24
opensuse	leap	42.1

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2016-4543