p PatchFirst

CVE-2025-14177

CVE-2025-14177 · Information Leak of Memory in getimagesize

This page contains facts from public vulnerability sources. Check the original advisory before updating.

In PHP versions:8.1.* before 8.1.34, 8.2.* before 8.2.30, 8.3.* before 8.3.29, 8.4.* before 8.4.16, 8.5.* before 8.5.1, the getimagesize() function may leak uninitialized heap memory into the APPn segments (e.g., APP1) when reading images in multi-chunk mode (such as via php://filter). This occurs due to a bug in php_read_stream_all_chunks() that overwrites the buffer without advancing the pointer, leaving tail bytes uninitialized. This may lead to information disclosure of sensitive heap data and affect the confidentiality of the target server.

CVSS 6.3 · Medium · EPSS 0.5% · Fix available

Published
Updated

Stack: system · php

Affected products and versions

  • php

    Versions
    • ≥ 8.1.*, < 8.1.34: Affected (semver)
    • ≥ 8.2.*, < 8.2.30: Affected (semver)
    • ≥ 8.3.*, < 8.3.29: Affected (semver)
    • ≥ 8.4.*, < 8.4.16: Affected (semver)
    • ≥ 8.5.*, < 8.5.1: Affected (semver)

    Update to 8.1.34; Update to 8.2.30; Update to 8.3.29; Update to 8.4.16; Update to 8.5.1

  • php8.2 Debian:12

    Versions
    • 8.2.10-1
    • 8.2.10-2
    • 8.2.12-1
    • 8.2.16-1
    • 8.2.16-2
    • 8.2.17-1
    • 8.2.18-1
    • 8.2.18-1~deb12u1
    • 8.2.20-1~deb12u1
    • 8.2.20-2
    • 8.2.20-3
    • 8.2.21-1
    • 8.2.23-1
    • 8.2.24-1
    • 8.2.24-1~deb12u1
    • 8.2.26-1~deb12u1
    • 8.2.26-4
    • 8.2.27-1
    • 8.2.28-1~deb12u1
    • 8.2.29-1~deb12u1
    • 8.2.5-2
    • 8.2.7-1
    • 8.2.7-1.1
    • 8.2.7-1.2
    • 8.2.7-1~deb12u1
    Affected ranges
    • ECOSYSTEM: < 8.2.30-1~deb12u1

    Update to 8.2.30-1~deb12u1

  • php8.4 Debian:13

    Versions
    • 8.4.11-1
    Affected ranges
    • ECOSYSTEM: < 8.4.16-1~deb13u1

    Update to 8.4.16-1~deb13u1

  • php8.4 Debian:14

    Versions
    • 8.4.11-1
    • 8.4.16-1~deb13u1
    Affected ranges
    • ECOSYSTEM: < 8.4.16-1

    Update to 8.4.16-1

  • php8.3 Ubuntu:24.04:LTS

    Versions
    • 8.3.0-1
    • 8.3.0-1ubuntu1
    • 8.3.4-1
    • 8.3.4-1build1
    • 8.3.6-0maysync1
    • 8.3.6-0ubuntu0.24.04.1
    • 8.3.6-0ubuntu0.24.04.2
    • 8.3.6-0ubuntu0.24.04.3
    • 8.3.6-0ubuntu0.24.04.4
    • 8.3.6-0ubuntu0.24.04.5
    Affected ranges
    • ECOSYSTEM: < 8.3.6-0ubuntu0.24.04.6

    Update to 8.3.6-0ubuntu0.24.04.6

  • php8.4 Ubuntu:25.10

    Versions
    • 8.4.5-1ubuntu1
    • 8.4.8-1ubuntu1
    • 8.4.11-1ubuntu1
    Affected ranges
    • ECOSYSTEM: < 8.4.11-1ubuntu1.1

    Update to 8.4.11-1ubuntu1.1

Original sources

Check your server →