CVE-2016-4543: Buffer Overflow
Fixed bug (Out of bounds heap read access in exif header processing). (CVE-2016-4542, CVE-2016-4543, CVE-2016-4544)
Other sources
The exifprocessIFDinJPEG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 does not validate IFD sizes, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via crafted header data.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-4543?
The severity of CVE-2016-4543 is critical with a severity value of 9.8.
How does CVE-2016-4543 affect PHP?
CVE-2016-4543 affects PHP versions before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6.
What is the impact of CVE-2016-4543?
The impact of CVE-2016-4543 is a denial of service (out-of-bounds read) or possibly other unspecified impact via crafted header data.
How can I patch CVE-2016-4543?
To patch CVE-2016-4543, you should update PHP to version 5.5.35, 5.6.21, or 7.0.6.
Where can I find more information about CVE-2016-4543?
You can find more information about CVE-2016-4543 at the following references: [PHP ChangeLog-7.0.6](https://www.php.net/ChangeLog-7.php#7.0.6), [OSS Security Mailing List](http://www.openwall.com/lists/oss-security/2016/05/05/21), [PHP ChangeLog-5](http://php.net/ChangeLog-5.php).