Skip to content
OpenAdvisories
Unscored USN-3702-2 1 CVE

php7.2 vulnerability

Published Jul 5, 2018 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

USN-3702-1 fixed a vulnerability in PHP. PHP 7.2.7 did not actually include
the fix for CVE-2018-12882. This update adds a backported patch to correct
the issue.

We apologize for the inconvenience.

Original advisory details:

It was discovered that PHP incorrectly handled exif tags in certain images.
A remote attacker could use this issue to cause PHP to crash, resulting in
a denial of service, or possibly execute arbitrary code.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 18.04 LTS 18.04:LTS php7.2 7.2.7-0ubuntu0.18.04.2

Vulnerabilities 1

  • Unscored —
    CVE-2018-12882

    exif_read_from_impl in ext/exif/exif.c in PHP 7.2.x through 7.2.7 allows attackers to trigger a use-after-free (in exif…

    php7.2 php7 Ubuntu Alpine

References

  • report
    https://ubuntu.com/security/CVE-2018-12882