CVE-2019-11038: Uninitialized read in gdImageCreateFromXbm
Fixed bug (Uninitialized read in gdImageCreateFromXbm) (CVE-2019-11038).
Other sources
When using gdImageCreateFromXbm() function of PHP gd extension in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6, it is possible to supply data that will cause the function to use the value of uninitialized variable. This may lead to disclosing contents of the stack that has been left there by previous code.
Reference: https://github.com/libgd/libgd/issues/501 https://bugs.php.net/bug.php?id=77973
— Red Hat
When using the gdImageCreateFromXbm() function in the GD Graphics Library (aka LibGD) 2.2.5, as used in the PHP GD extension in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6, it is possible to supply data that will cause the function to use the value of uninitialized variable. This may lead to disclosing contents of the stack that has been left there by previous code.
Affected Software
Remediation
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is CVE-2019-11038?
CVE-2019-11038 is a vulnerability in the GD Graphics Library (LibGD) 2.2.5 used in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6.
How severe is CVE-2019-11038?
CVE-2019-11038 has a severity rating of 5.3, which is considered high.
What is the affected software for CVE-2019-11038?
The affected software for CVE-2019-11038 includes PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19, and 7.3.x below 7.3.6, as well as LibGD 2.2.5.
How do I fix CVE-2019-11038?
To fix CVE-2019-11038, update PHP to version 7.1.30, 7.2.19, or 7.3.6, or update LibGD to a version that includes the fix.
Where can I find more information about CVE-2019-11038?
You can find more information about CVE-2019-11038 at the following references: [CVE-2019-11038](https://www.php.net/ChangeLog-7.php#7.1.30), [GD Lib Issue #501](https://github.com/libgd/libgd/issues/501), [PHP Bug #77973](https://bugs.php.net/bug.php?id=77973).