Critical PHP Memory Safety Vulnerabilities Exposed by Malicious JPEG Files

Two critical memory-safety vulnerabilities in PHP's image-processing functions were discovered by Positive Technologies researcher Nikita Sveshnikov. These flaws affect the widely-used getimagesize and iptcembed functions in PHP's ext/standard extension. Attackers can exploit these vulnerabilities to leak sensitive heap memory or execute denial-of-service attacks using specially crafted JPEG files. The vulnerabilities highlight a significant risk in PHP's handling of untrusted input, particularly image files, which are commonly used in web applications. PHP is a widely used web programming language, making the potential impact substantial. As of now, no specific CVEs have been assigned, but the vulnerabilities are under investigation. Security professionals are advised to monitor for updates and apply necessary mitigations.

Key Points: • Two critical memory-safety vulnerabilities in PHP's image-processing functions were discovered. • Attackers can exploit these flaws using specially crafted JPEG files to leak memory or cause denial-of-service. • PHP's ext/standard extension is specifically affected, raising concerns about its handling of untrusted input.