🕵️ CVE-2016-6291 | PHP up to 5.5.37/5.6.23/7.0.8 ext/exif/exif.c exif_process_IFD_in_MAKERNOTE memory corruption (Nessus ID 119979 / ID 175796)

A vulnerability was found in PHP up to 5.5.37/5.6.23/7.0.8. It has been rated as very critical. Affected by this issue is the function exif_process_IFD_in_MAKERNOTE of the file ext/exif/exif.c. The manipulation leads to memory corruption. This vulnerability is handled as CVE-2016-6291. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component. ...