Fluid Attacks Database

Description

In PHP versions prior to 7.4.33, 8.0.25 and 8.1.12, when using imageloadfont() function in gd extension, it is possible to supply a specially crafted font file, such as if the loaded font is used with imagechar() function, the read outside allocated buffer will be used. This can lead to crashes or disclosure of confidential information.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
debian 11	php7.4	=7.4.21-1+deb11u1 \|\| =7.4.25-1+deb11u1 \|\| =7.4.26-1 \|\| =7.4.28-1+deb11u1 \|\| =7.4.30-1+deb11u1 \|\| >=0 <7.4.33-1+deb11u1	7.4.33-1+deb11u1
rpm rhel8	php	<0:7.4.33-1.module+el8.8.0+17865+ef7eddfa	0:7.4.33-1.module+el8.8.0+17865+ef7eddfa
rpm rhel9	php	<0:8.0.27-1.el9_1	0:8.0.27-1.el9_1

Aliases

1. CVE-2022-316302. NVD-2022-316303. OSV-DEBIAN-2022-316304. OSV-2022-316305. SECURITY-TRACKER-CVE-2022-31630

References

1. https://github.com/sepkascurty-cpu/CVE-2022-31630---Proof-of-Concept-Exploit-untuk-PHP-7.4.33

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.