CVE-2018-14851

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

exif_process_IFD_in_MAKERNOTE in ext/exif/exif.c in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, and 7.2.x before 7.2.8 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted JPEG file.

Metrics

CVSS 3.0 5.5/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-125

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://php.net/ChangeLog-5.phpRelease Notes, Vendor Advisory
http://php.net/ChangeLog-7.phpRelease Notes, Vendor Advisory
http://www.securityfocus.com/bid/104871Third Party Advisory, VDB Entry
https://access.redhat.com/errata/RHSA-2019:2519
https://bugs.php.net/bug.php?id=76557Issue Tracking, Patch, Vendor Advisory
https://lists.debian.org/debian-lts-announce/2018/09/msg00000.htmlThird Party Advisory
https://security.netapp.com/advisory/ntap-20181107-0003/Third Party Advisory
https://usn.ubuntu.com/3766-1/Third Party Advisory
https://usn.ubuntu.com/3766-2/Third Party Advisory
https://www.debian.org/security/2018/dsa-4353Third Party Advisory
https://www.tenable.com/security/tns-2018-12Third Party Advisory
http://php.net/ChangeLog-5.phpRelease Notes, Vendor Advisory
http://php.net/ChangeLog-7.phpRelease Notes, Vendor Advisory
http://www.securityfocus.com/bid/104871Third Party Advisory, VDB Entry
https://access.redhat.com/errata/RHSA-2019:2519
https://bugs.php.net/bug.php?id=76557Issue Tracking, Patch, Vendor Advisory
https://lists.debian.org/debian-lts-announce/2018/09/msg00000.htmlThird Party Advisory
https://security.netapp.com/advisory/ntap-20181107-0003/Third Party Advisory
https://usn.ubuntu.com/3766-1/Third Party Advisory
https://usn.ubuntu.com/3766-2/Third Party Advisory
https://www.debian.org/security/2018/dsa-4353Third Party Advisory
https://www.tenable.com/security/tns-2018-12Third Party Advisory

Timeline

Published: Aug 2, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-148526.3Out-of-bounds array access in dhd_rx_frame in drivers/net/wireless/bcmdhd4358/dhd_linux.c in the bcmdhd4358 Wi-Fi driver on the Samsung Gala CVE-2018-148534.3A NULL pointer dereference in dhd_prot_txdata_write_flush in drivers/net/wireless/bcmdhd4358/dhd_msgbuf.c in the bcmdhd4358 Wi-Fi driver on CVE-2018-148546.3Buffer overflow in dhd_bus_flow_ring_delete_response in drivers/net/wireless/bcmdhd4358/dhd_pcie.c in the bcmdhd4358 Wi-Fi driver on the Sam CVE-2018-148556.3Buffer overflow in dhd_bus_flow_ring_flush_response in drivers/net/wireless/bcmdhd4358/dhd_pcie.c in the bcmdhd4358 Wi-Fi driver on the Sams CVE-2018-148566.3Buffer overflow in dhd_bus_flow_ring_create_response in drivers/net/wireless/bcmdhd4358/dhd_pcie.c in the bcmdhd4358 Wi-Fi driver on the Sam CVE-2018-148578.8Unrestricted file upload (with remote code execution) in require/mail/NotificationMail.php in Webconsole in OCS Inventory NG OCS Inventory S CVE-2018-148587.5An SSRF vulnerability was discovered in idreamsoft iCMS before V7.0.11 because the remote function in app/spider/spider_tools.class.php does CVE-2018-148598.1Incorrect access control in the password reset component in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows auth CVE-2018-148609.1Improper sanitization of dynamic user expressions in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows authenticat CVE-2018-148616.5Improper data access control in Odoo Community 10.0 and 11.0 and Odoo Enterprise 10.0 and 11.0 allows authenticated users to perform a CSV e CVE-2018-148626.5Incorrect access control in the mail templating system in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows authen CVE-2018-148638.1Incorrect access control in the RPC framework in Odoo Community 8.0 through 11.0 and Odoo Enterprise 9.0 through 11.0 allows authenticated u