Skip to content

ext/exif: Reject TIFF thumbnails that extend past the file - #23934

Open
iliaal wants to merge 1 commit into
php:PHP-8.4from
iliaal:fix/exif-tiff-thumbnail-bound-84
Open

iliaal wants to merge 1 commit into
php:PHP-8.4from
iliaal:fix/exif-tiff-thumbnail-bound-84

Conversation

@iliaal

@iliaal iliaal commented Sep 26, 2026

Copy link
Copy Markdown
Member

The SUB-IFD thumbnail path allocated Thumbnail.size with no check against the file, so a tag past EOF tried to allocate the declared size. An offset or size that extends past the file is rejected before the allocation.

The SUB-IFD thumbnail path allocated Thumbnail.size with no check against
the file, so a tag past EOF tried to allocate the declared size. Reject
an offset or size that extends past the file before allocating.
@LamentXU123

Copy link
Copy Markdown
Member

Ah sorry I don't have time to read the exif code base and give resposible reviews. Let's wait for Gina's opinions :)

@LamentXU123
LamentXU123 removed their request for review October 4, 2026 07:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants