[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fJNGd_84M9l0d8ctZqOWLwwYkhqL6L2WpAPvKDaGMG7g":3,"g5a-risk:CVE-2019-11050":251},{"success":4,"data":5,"meta":249},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":46,"epssPercentile":26,"epssTimeSeries":47,"severity":48,"affectedProducts":49,"affectedProductsCount":102,"references":103,"referencesCount":156,"weaknesses":157,"weaknessesCount":166,"isActivelyExploited":167,"cisaInfo":26,"otxData":26,"relatedBlogPosts":168,"seoMetadata":169,"configurations":194,"relatedVendorCves":247,"notableEvents":248},"CVE-2019-11050","What is CVE-2019-11050?","When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash.","When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13...","2019-12-23T03:15:11.977","2023-11-07T03:02:38.807",6.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:L",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":37,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":23,"AvailabilityImpact":22,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":22,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","MEDIUM",null,3.9,2.5,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":36,"ImpactScore":28},"dd77f84a-d19a-4638-8c3d-a322d820ed2b","Secondary",{"Version":20,"VectorString":33,"AttackVector":21,"AttackComplexity":34,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":23,"AvailabilityImpact":22,"BaseScore":35,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":22,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:L","HIGH",4.8,2.2,[38],{"Source":17,"Type":18,"CVSSData":39,"BaseSeverity":25,"ExploitabilityScore":44,"ImpactScore":45,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":40,"VectorString":41,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":42,"IntegrityImpact":23,"AvailabilityImpact":42,"BaseScore":43,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:N\u002FA:P","PARTIAL",6.4,10,4.9,0.07624,[46,46,46,46,46,46,46],"Medium",[50,54,57,62,65,68,71,74,79,84,87,90,93,97],{"vendor":51,"product":51,"version":52,"criteria":53,"vulnerable":4},"php","*","cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",{"vendor":51,"product":51,"version":55,"criteria":56,"vulnerable":4},"7.4.0","cpe:2.3:a:php:php:7.4.0:*:*:*:*:*:*:*",{"vendor":58,"product":59,"version":60,"criteria":61,"vulnerable":4},"canonical","ubuntu_linux","12.04","cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*",{"vendor":58,"product":59,"version":63,"criteria":64,"vulnerable":4},"14.04","cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*",{"vendor":58,"product":59,"version":66,"criteria":67,"vulnerable":4},"16.04","cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",{"vendor":58,"product":59,"version":69,"criteria":70,"vulnerable":4},"18.04","cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",{"vendor":58,"product":59,"version":72,"criteria":73,"vulnerable":4},"19.04","cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*",{"vendor":75,"product":76,"version":77,"criteria":78,"vulnerable":4},"debian","debian_linux","8.0","cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",{"vendor":80,"product":81,"version":82,"criteria":83,"vulnerable":4},"fedoraproject","fedora","30","cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*",{"vendor":80,"product":81,"version":85,"criteria":86,"vulnerable":4},"31","cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*",{"vendor":75,"product":76,"version":88,"criteria":89,"vulnerable":4},"9.0","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",{"vendor":75,"product":76,"version":91,"criteria":92,"vulnerable":4},"10.0","cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",{"vendor":94,"product":95,"version":52,"criteria":96,"vulnerable":4},"tenable","securitycenter","cpe:2.3:a:tenable:securitycenter:*:*:*:*:*:*:*:*",{"vendor":98,"product":99,"version":100,"criteria":101,"vulnerable":4},"opensuse","leap","15.1","cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*",14,[104,110,117,121,125,128,132,135,138,142,146,149,152],{"url":105,"source":106,"tags":107},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2020-01\u002Fmsg00036.html","Opensuse",[108,109],"Mailing List","Third Party Advisory",{"url":111,"source":112,"tags":113},"https:\u002F\u002Fbugs.php.net\u002Fbug.php?id=78793","Php",[114,108,115,116],"Exploit","Patch","Vendor Advisory",{"url":118,"source":119,"tags":120},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2019\u002F12\u002Fmsg00034.html","Debian",[108,109],{"url":122,"source":123,"tags":124},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FN7GCOAE6KVHYJ3UQ4KLPLTGSLX6IRVRN\u002F","Fedoraproject",[],{"url":126,"source":123,"tags":127},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FXWRQPYXVG43Q7DXMXH6UVWMKWGUW552F\u002F",[],{"url":129,"source":130,"tags":131},"https:\u002F\u002Fseclists.org\u002Fbugtraq\u002F2020\u002FFeb\u002F27","Seclists",[108,109],{"url":133,"source":130,"tags":134},"https:\u002F\u002Fseclists.org\u002Fbugtraq\u002F2020\u002FFeb\u002F31",[108,109],{"url":136,"source":130,"tags":137},"https:\u002F\u002Fseclists.org\u002Fbugtraq\u002F2021\u002FJan\u002F3",[108,109],{"url":139,"source":140,"tags":141},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20200103-0002\u002F","Netapp",[109],{"url":143,"source":144,"tags":145},"https:\u002F\u002Fusn.ubuntu.com\u002F4239-1\u002F","Ubuntu",[109],{"url":147,"source":119,"tags":148},"https:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2020\u002Fdsa-4626",[109],{"url":150,"source":119,"tags":151},"https:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2020\u002Fdsa-4628",[109],{"url":153,"source":154,"tags":155},"https:\u002F\u002Fwww.tenable.com\u002Fsecurity\u002Ftns-2021-14","Tenable",[109],13,[158],{"id":159,"name":160,"description":161,"extendedDescription":162,"status":163,"abstraction":164,"structure":165},"CWE-125","Out-of-bounds Read","The product reads data past the end, or before the beginning, of the intended buffer.","","Draft","Base","Simple",1,false,[],{"title":170,"metaDescription":171,"keywords":172,"canonicalUrl":173,"structuredData":174},"What is CVE-2019-11050? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2019-11050, a medium severity cyber security vulnerability from 2019. When PHP EXIF extension is parsing EXIF information from ...","CVE-2019-11050, CVE-2019-11050 vulnerability, CVE-2019-11050 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, php security, canonical security, debian security, fedoraproject security, php vulnerability, ubuntu_linux vulnerability, debian_linux vulnerability, fedora vulnerability","\u002Fwhat-is\u002Fcve-2019-11050",{"@context":175,"@type":176,"headline":170,"description":171,"datePublished":10,"dateModified":11,"author":177,"publisher":181,"about":185,"mainEntityOfPage":189,"articleSection":192,"keywords":193},"https:\u002F\u002Fschema.org","TechArticle",{"@type":178,"name":179,"url":180},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":178,"name":179,"url":180,"logo":182},{"@type":183,"url":184},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":186,"name":6,"description":187,"additionalType":188},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":190,"@id":191},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2019-11050","Cybersecurity","CVE-2019-11050, CVE-2019-11050 vulnerability, CVE-2019-11050 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[195,210,230,238],{"Operator":26,"Negate":26,"Nodes":196},[197],{"Operator":198,"Negate":26,"CPEMatch":199},"OR",[200,204,208],{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":201,"VersionStartExcluding":26,"VersionStartIncluding":202,"VersionEndExcluding":26,"VersionEndIncluding":203},"CA273A0A-9438-40CA-8DD9-E97FADE3BBF7","7.2.0","7.2.26",{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":205,"VersionStartExcluding":26,"VersionStartIncluding":206,"VersionEndExcluding":26,"VersionEndIncluding":207},"2083CFF8-5F24-46C7-AA69-F8AE86874E70","7.3.0","7.3.13",{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":209,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"DB281E6F-3CB5-49C4-B62C-307AEA35AE56",{"Operator":26,"Negate":26,"Nodes":211},[212],{"Operator":198,"Negate":26,"CPEMatch":213},[214,216,218,220,222,224,226,228],{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":215,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"CB66DB75-2B16-4EBF-9B93-CE49D8086E41",{"Vulnerable":4,"Criteria":64,"MatchCriteriaID":217,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"815D70A8-47D3-459C-A32C-9FEACA0659D1",{"Vulnerable":4,"Criteria":67,"MatchCriteriaID":219,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B",{"Vulnerable":4,"Criteria":70,"MatchCriteriaID":221,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D",{"Vulnerable":4,"Criteria":73,"MatchCriteriaID":223,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"CD783B0C-9246-47D9-A937-6144FE8BFF0F",{"Vulnerable":4,"Criteria":78,"MatchCriteriaID":225,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43",{"Vulnerable":4,"Criteria":83,"MatchCriteriaID":227,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"97A4B8DF-58DA-4AB6-A1F9-331B36409BA3",{"Vulnerable":4,"Criteria":86,"MatchCriteriaID":229,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"80F0FA5D-8D3B-4C0E-81E2-87998286AF33",{"Operator":26,"Negate":26,"Nodes":231},[232],{"Operator":198,"Negate":26,"CPEMatch":233},[234,236],{"Vulnerable":4,"Criteria":89,"MatchCriteriaID":235,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"DEECE5FC-CACF-4496-A3E7-164736409252",{"Vulnerable":4,"Criteria":92,"MatchCriteriaID":237,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73",{"Operator":26,"Negate":26,"Nodes":239},[240],{"Operator":198,"Negate":26,"CPEMatch":241},[242,245],{"Vulnerable":4,"Criteria":96,"MatchCriteriaID":243,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":244,"VersionEndIncluding":26},"FFDEC754-9E4C-4FCE-8B91-0FAB7CBC4BA1","5.19.0",{"Vulnerable":4,"Criteria":101,"MatchCriteriaID":246,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"B620311B-34A3-48A6-82DF-6F078D7A4493",[],[],{"lastModified":11,"cacheTime":250,"version":40},1792338713784,{"score":252,"band":48,"action":253,"scoredAt":254},50,"Plan remediation","2026-10-16T06:47:30.817749+00:00"]