Loading HuntDB...
Hunt
Vulnerability Intelligence by wss.sh
Home Daily Briefings High Impact CVEs Recent Exploits KEV Catalog GitHub Advisories Latest Updates Security News
Sign In Sign Up

CVE-2019-11038

LOW
Published 2019-06-18T23:28:28.236592Z
Actions:

Expert Analysis

Professional remediation guidance

Get tailored security recommendations from our analyst team for CVE-2019-11038. We'll provide specific mitigation strategies based on your environment and risk profile.

CVSS Score

V3.0
3.1
/10
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
Base Score Metrics
Exploitability: N/A Impact: N/A

EPSS Score

v2025.03.14
0.092
probability
of exploitation in the wild

There is a 9.2% chance that this vulnerability will be exploited in the wild within the next 30 days.

Updated: 2025-06-25
Exploit Probability
Percentile: 0.923
Higher than 92.3% of all CVEs

Attack Vector Metrics

Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED

Impact Metrics

Confidentiality
LOW
Integrity
NONE
Availability
NONE

Description

When using the gdImageCreateFromXbm() function in the GD Graphics Library (aka LibGD) 2.2.5, as used in the PHP GD extension in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6, it is possible to supply data that will cause the function to use the value of uninitialized variable. This may lead to disclosing contents of the stack that has been left there by previous code.

Available Exploits

No exploits available for this CVE.

Related News

No news articles found for this CVE.

Affected Products

PHP Group

PHP

Affected Versions:

7.1.x < 7.1.30 7.2.x < 7.2.19 7.3.x < 7.3.6

GitHub Security Advisories

Community-driven vulnerability intelligence from GitHub

⚠ Unreviewed MODERATE

GHSA-8v67-h8jw-j3r2

Advisory Details

When using gdImageCreateFromXbm() function of gd extension in versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6, it is possible to supply data that will cause the function to use the value of uninitialized variable. This may lead to disclosing contents of the stack that has been left there by previous code.

CVSS Scoring

CVSS Score

5.0

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2019-11038
WEB https://github.com/libgd/libgd/issues/501
WEB https://www.debian.org/security/2019/dsa-4529
WEB https://usn.ubuntu.com/4316-2
WEB https://usn.ubuntu.com/4316-1
WEB https://seclists.org/bugtraq/2019/Sep/38
WEB https://lists.fedoraproject.org/archives/list/[email protected]/message/WAZBVK6XNYEIN7RDQXESSD63QHXPLKWL
WEB https://lists.fedoraproject.org/archives/list/[email protected]/message/PKSSWFR2WPMUOIB5EN5ZM252NNEPYUTG
WEB https://lists.fedoraproject.org/archives/list/[email protected]/message/3CZ2QADQTKRHTGB2AHD7J4QQNDLBEMM6
WEB https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WAZBVK6XNYEIN7RDQXESSD63QHXPLKWL
WEB https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PKSSWFR2WPMUOIB5EN5ZM252NNEPYUTG
WEB https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3CZ2QADQTKRHTGB2AHD7J4QQNDLBEMM6
WEB https://lists.debian.org/debian-lts-announce/2019/06/msg00003.html
WEB https://bugzilla.suse.com/show_bug.cgi?id=1140120
WEB https://bugzilla.suse.com/show_bug.cgi?id=1140118
WEB https://bugzilla.redhat.com/show_bug.cgi?id=1724432
WEB https://bugzilla.redhat.com/show_bug.cgi?id=1724149
WEB https://bugs.php.net/bug.php?id=77973
WEB https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=929821
WEB https://access.redhat.com/errata/RHSA-2019:3299
WEB https://access.redhat.com/errata/RHSA-2019:2519
WEB http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00020.html

Advisory provided by GitHub Security Advisory Database. Published: May 24, 2022, Modified: April 4, 2024

References

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PKSSWFR2WPMUOIB5EN5ZM252NNEPYUTG/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WAZBVK6XNYEIN7RDQXESSD63QHXPLKWL/
https://lists.debian.org/debian-lts-announce/2019/06/msg00003.html
https://bugs.php.net/bug.php?id=77973
https://github.com/libgd/libgd/issues/501
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=929821
https://bugzilla.suse.com/show_bug.cgi?id=1140118
https://bugzilla.suse.com/show_bug.cgi?id=1140120
https://bugzilla.redhat.com/show_bug.cgi?id=1724149
https://bugzilla.redhat.com/show_bug.cgi?id=1724432
https://access.redhat.com/errata/RHSA-2019:2519
https://www.debian.org/security/2019/dsa-4529
https://seclists.org/bugtraq/2019/Sep/38
https://access.redhat.com/errata/RHSA-2019:3299
http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00020.html
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3CZ2QADQTKRHTGB2AHD7J4QQNDLBEMM6/
https://usn.ubuntu.com/4316-2/
https://usn.ubuntu.com/4316-1/

HackerOne Reports

Uninitialized read in gdImageCreateFromXbm Medium
chamal
Internet Bug Bounty
Information Disclosure
View Report
Published: 2019-06-18T23:28:28.236592Z
Last Modified: 2024-09-16T21:04:15.889Z
Copied to clipboard!