CVE ID:	CVE-2019-11047
Description:	When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2019-11047 Bugtraq: 20200218 [SECURITY] [DSA 4626-1] php7.3 security update (Google Search) https://seclists.org/bugtraq/2020/Feb/27 Bugtraq: 20200219 [SECURITY] [DSA 4628-1] php7.0 security update (Google Search) https://seclists.org/bugtraq/2020/Feb/31 Bugtraq: 20210116 Re: [SECURITY] [DSA 4628-1] php7.0 security update (Google Search) https://seclists.org/bugtraq/2021/Jan/3 Debian Security Information: DSA-4626 (Google Search) https://www.debian.org/security/2020/dsa-4626 Debian Security Information: DSA-4628 (Google Search) https://www.debian.org/security/2020/dsa-4628 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N7GCOAE6KVHYJ3UQ4KLPLTGSLX6IRVRN/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XWRQPYXVG43Q7DXMXH6UVWMKWGUW552F/ https://bugs.php.net/bug.php?id=78910 https://lists.debian.org/debian-lts-announce/2019/12/msg00034.html SuSE Security Announcement: openSUSE-SU-2020:0080 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00036.html https://usn.ubuntu.com/4239-1/