CVE-2020-7064: Use-of-uninitialized-value in exif

Published Feb 17, 2020
·
Updated

A vulnerability was found in PHP versions 7.2.x below 7.2.9, 7.3.x below 7.3.16 and 7.4.x below 7.4.4, while parsing EXIF data with exifreaddata() function, it is possible for malicious data to cause PHP to read one byte of uninitialized memory. This could potentially lead to information disclosure or crash.

Other sources

Fixed bug (Use-of-uninitialized-value in exif) (CVE-2020-7064) (Nikita)

PHP

Affected Software

20 affected componentsFixes available
redhat/rh-php73-php<0:7.3.20-1.el7
0:7.3.20-1.el7
redhat/php<7.2.9
7.2.9
redhat/php<7.3.16
7.3.16
redhat/php<7.4.4
7.4.4
PHP PHP<7.2.29
7.2.29
PHP PHP>=7.2.0<7.2.29
PHP PHP>=7.3.0<7.3.16
PHP PHP>=7.4.0<7.4.4
Debian Debian Linux=8.0
Debian Debian Linux=9.0
Debian Debian Linux=10.0
Canonical Ubuntu Linux=12.04
Canonical Ubuntu Linux=14.04
Canonical Ubuntu Linux=16.04
Canonical Ubuntu Linux=18.04
Canonical Ubuntu Linux=19.10
Canonical Ubuntu Linux=20.04
openSUSE Leap=15.1
Tenable Tenable.Sc<5.19.0
debian/php7.4
7.4.33-1+deb11u57.4.33-1+deb11u11

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade redhat/rh-php73-php to a version that resolves this vulnerability.

    Fixed in 0:7.3.20-1.el7
  2. Upgrade

    Upgrade redhat/php to a version that resolves this vulnerability.

    Fixed in 7.2.9
  3. Upgrade

    Upgrade redhat/php to a version that resolves this vulnerability.

    Fixed in 7.3.16
  4. Upgrade

    Upgrade redhat/php to a version that resolves this vulnerability.

    Fixed in 7.4.4
  5. Upgrade

    Upgrade PHP to a version that resolves this vulnerability.

    Fixed in 7.2.29
  6. Upgrade

    Upgrade debian/php7.4 to a version that resolves this vulnerability.

    Fixed in 7.4.33-1+deb11u5Fixed in 7.4.33-1+deb11u11
  7. Upgrade

    Upgrade PHP to a version that resolves this vulnerability.

    Fixed in 7.2.9
  8. Upgrade

    Upgrade PHP to a version that resolves this vulnerability.

    Fixed in 7.3.16
  9. Upgrade

    Upgrade PHP to a version that resolves this vulnerability.

    Fixed in 7.4.4

Event History

Mar 19, 2020
CVE Published
via PHP·12:00 AM
Apr 1, 2020
CVE Published
via MITRE·03:35 AM
Data Sourced
via MITRE·03:35 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:15 AM
RemedyDescriptionSeverityWeaknessAffected Software
Jan 11, 2024
Data Sourced
via Launchpad·11:52 PM
Description
Feb 24, 2026
Data Sourced
via Ubuntu·12:24 AM
RemedyDescriptionSeverityAffected Software
Jul 7, 2026
Data Sourced
via Debian·03:59 AM
DescriptionAffected Software

Parent advisories

This vulnerability appears in the following advisories.

Frequently Asked Questions

1

What is CVE-2020-7064?

CVE-2020-7064 is a vulnerability in PHP versions 7.2.x below 7.2.9, 7.3.x below 7.3.16, and 7.4.x below 7.4.4 that allows malicious data to cause PHP to read uninitialized memory, potentially leading to information disclosure or a crash.

2

How does CVE-2020-7064 affect PHP?

CVE-2020-7064 affects PHP by allowing malicious data to be parsed with the exif_read_data() function, leading to the potential reading of uninitialized memory.

3

What is the severity of CVE-2020-7064?

The severity of CVE-2020-7064 is medium with a severity score of 5.4.

4

How can I fix CVE-2020-7064?

Fix CVE-2020-7064 by upgrading PHP to version 7.2.9 or above for PHP 7.2.x, version 7.3.16 or above for PHP 7.3.x, and version 7.4.4 or above for PHP 7.4.x.

5

Where can I find more information about CVE-2020-7064?

More information about CVE-2020-7064 can be found at the following references: [Bugzilla](https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1820602), [PHP Bugs](https://bugs.php.net/bug.php?id=79282), [PHP Git Commit](http://git.php.net/?p=php-src.git;a=commit;h=0c77b4307df73217283a4aaf9313e1a33a0967ff).

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203