CVE-2022-31630

EUVD-2022-53082
In PHP versions prior to 7.4.33, 8.0.25 and 8.1.12, when using imageloadfont() function in gd extension, it is possible to supply a specially crafted font file, such as if the loaded font is used with imagechar() function, the read outside allocated buffer will be used. This can lead to crashes or disclosure of confidential information. 
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.5 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
phpCNA
6.5 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
Base Score
CVSS 3.x
EPSS Score
Percentile: 18%
Affected Products (NVD)
VendorProductVersion
phpphp
7.4.0 ≤
𝑥
< 7.4.33
phpphp
8.0.0 ≤
𝑥
< 8.0.25
phpphp
8.1.0 ≤
𝑥
< 8.1.12
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
php7.4
bullseye
7.4.33-1+deb11u5
fixed
bullseye (security)
7.4.33-1+deb11u6
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
php5
bionic
dne
focal
dne
jammy
dne
kinetic
dne
trusty
not-affected
xenial
dne
php7.0
bionic
dne
focal
dne
jammy
dne
kinetic
dne
trusty
dne
xenial
not-affected
php7.2
bionic
not-affected
focal
dne
jammy
dne
kinetic
dne
trusty
dne
xenial
dne
php7.4
bionic
dne
focal
Fixed 7.4.3-4ubuntu2.15
released
jammy
dne
kinetic
dne
trusty
dne
xenial
dne
php8.1
bionic
dne
focal
dne
jammy
Fixed 8.1.2-1ubuntu2.8
released
kinetic
Fixed 8.1.7-1ubuntu3.1
released
lunar
Fixed 8.1.12-1ubuntu2
released
trusty
dne
xenial
dne