Secure Bulletin Navigating the cyber sea with knowledge
Home > Tag > CVE-2025-14177
#CVE-2025-14177

CVE-2025-14177: Malicious JPEG Files Expose PHP Heap Memory — Critical Flaws in getimagesize() and iptcembed() Patched

18 May 2026  |  dark6  |  Vulnerability

Two critical memory-safety vulnerabilities in PHP image-processing functions allow attackers to leak sensitive heap memory (CVE-2025-14177) or trigger heap buffer overflows via malicious JPEG files. All PHP 8.1...

>> read more