cve/2019/CVE-2019-9641.md

CVE-2019-9641

Description

An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exif_process_IFD_in_TIFF.

POC

Reference

• https://hackerone.com/reports/510336

Github

• https://github.com/Dhruv3215/Task---3-Elevate-labs-vulnerability-scan
• https://github.com/Schnaidr/CVE-2019-9641-php-RCE
• https://github.com/janforman/php-5
• https://github.com/syadg123/pigat
• https://github.com/teamssix/pigat