[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2018-12882":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-05T02:55:30.529Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":20,"aliases":21,"duplicate_of":9,"upstream":22,"downstream":23,"duplicates":46,"related":47,"reserved_at":9,"published_at":56,"modified_at":57,"state":58,"summary":59,"references_raw":68,"kevs":98,"epss":99,"epss_history":102,"metrics":368,"affected":377},"CVE-2018-12882","exif_read_from_impl in ext/exif/exif.c in PHP 7.2.x through 7.2.7 allows attackers to trigger a use-after-free (in exif_read_from_file) because it closes a stream that it is not responsible for closing. The vulnerable code is reachable through the PHP exif_read_data function.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-416","Use After Free","The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory \"belongs\" to the code that operates on the new pointer.","weakness","Stable","Variant","High",[],[],[],[],[24,26,28,30,32,34,36,38,40,42,44],{"_key":25},"SUSE-SU-2018:1886-1",{"_key":27},"SUSE-SU-2018:1936-1",{"_key":29},"SUSE-SU-2018:1936-2",{"_key":31},"SUSE-SU-2018:2044-1",{"_key":33},"SUSE-SU-2018:2682-1",{"_key":35},"SUSE-SU-2022:4067-1",{"_key":37},"OPENSUSE-SU-2024:11167-1",{"_key":39},"OPENSUSE-SU-2024:11169-1",{"_key":41},"UBUNTU-CVE-2018-12882",{"_key":43},"USN-3702-1",{"_key":45},"USN-3702-2",[],[48,49,50,51,52,53,54,55],{"_key":25},{"_key":27},{"_key":29},{"_key":31},{"_key":33},{"_key":35},{"_key":37},{"_key":39},"2018-06-26T03:00:00.000Z","2024-08-05T08:45:02.487Z","Modified",{"cisa_kev":60,"cisa_ransomware":60,"cisa_vendor":9,"epss_severity":61,"epss_score":62,"severity":63,"severity_score":64,"severity_version":65,"severity_source":66,"severity_vector":67,"severity_status":58},false,"low",0.05202,"critical",9.8,"v3.0","nvd","CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",[69,77,83,90,94],{"url":70,"sources":71,"tags":73},"http://www.securityfocus.com/bid/104551",[72,66],"cve.org",[74,75,76],"VDB Entry","X Refsource BID","Third Party Advisory",{"url":78,"sources":79,"tags":80},"https://usn.ubuntu.com/3702-2/",[72,66],[81,82,76],"Vendor Advisory","X Refsource UBUNTU",{"url":84,"sources":85,"tags":86},"https://bugs.php.net/bug.php?id=76409",[72,66],[87,88,89,81],"X Refsource CONFIRM","Issue Tracking","Patch",{"url":91,"sources":92,"tags":93},"https://usn.ubuntu.com/3702-1/",[72,66],[81,82,76],{"url":95,"sources":96,"tags":97},"https://security.netapp.com/advisory/ntap-20181109-0001/",[72,66],[87,76],[],{"date":100,"score":62,"percentile":101},"2026-06-04",0.90096,[103,107,110,113,115,118,120,122,125,128,131,134,137,140,142,146,149,152,155,158,161,164,167,169,171,174,177,180,184,187,190,193,196,198,200,203,206,210,213,216,219,222,225,228,231,234,237,239,242,244,247,250,253,256,260,263,266,270,273,277,280,283,286,289,291,294,297,300,304,307,310,313,316,319,322,324,327,329,331,334,337,340,343,346,349,352,355,358,361,364],{"date":104,"score":105,"percentile":106},"2025-11-04",0.04292,0.88329,{"date":108,"score":105,"percentile":109},"2025-11-05",0.8833,{"date":111,"score":105,"percentile":112},"2025-11-06",0.88323,{"date":114,"score":105,"percentile":106},"2025-11-07",{"date":116,"score":105,"percentile":117},"2025-11-08",0.88333,{"date":119,"score":105,"percentile":109},"2025-11-09",{"date":121,"score":105,"percentile":106},"2025-11-10",{"date":123,"score":105,"percentile":124},"2025-11-11",0.88335,{"date":126,"score":105,"percentile":127},"2025-11-12",0.88343,{"date":129,"score":105,"percentile":130},"2025-11-13",0.88348,{"date":132,"score":105,"percentile":133},"2025-11-14",0.88352,{"date":135,"score":105,"percentile":136},"2025-11-15",0.88347,{"date":138,"score":105,"percentile":139},"2025-11-16",0.88351,{"date":141,"score":105,"percentile":136},"2025-11-17",{"date":143,"score":144,"percentile":145},"2025-11-18",0.04411,0.87902,{"date":147,"score":144,"percentile":148},"2025-11-19",0.87906,{"date":150,"score":144,"percentile":151},"2025-11-20",0.8791,{"date":153,"score":105,"percentile":154},"2025-11-21",0.88361,{"date":156,"score":105,"percentile":157},"2025-11-22",0.8836,{"date":159,"score":105,"percentile":160},"2025-11-23",0.88356,{"date":162,"score":105,"percentile":163},"2025-11-24",0.88355,{"date":165,"score":105,"percentile":166},"2025-11-25",0.88357,{"date":168,"score":105,"percentile":160},"2025-11-26",{"date":170,"score":105,"percentile":166},"2025-11-27",{"date":172,"score":105,"percentile":173},"2025-11-28",0.88349,{"date":175,"score":105,"percentile":176},"2025-11-29",0.88423,{"date":178,"score":105,"percentile":179},"2025-11-30",0.88419,{"date":181,"score":182,"percentile":183},"2025-12-01",0.02856,0.85836,{"date":185,"score":182,"percentile":186},"2025-12-02",0.85839,{"date":188,"score":182,"percentile":189},"2025-12-03",0.85841,{"date":191,"score":105,"percentile":192},"2025-12-04",0.88417,{"date":194,"score":105,"percentile":195},"2025-12-05",0.88422,{"date":197,"score":105,"percentile":176},"2025-12-06",{"date":199,"score":105,"percentile":176},"2025-12-07",{"date":201,"score":105,"percentile":202},"2025-12-08",0.88424,{"date":204,"score":105,"percentile":205},"2025-12-09",0.88436,{"date":207,"score":208,"percentile":209},"2025-12-10",0.05084,0.89416,{"date":211,"score":208,"percentile":212},"2025-12-11",0.89419,{"date":214,"score":208,"percentile":215},"2025-12-12",0.89424,{"date":217,"score":208,"percentile":218},"2025-12-13",0.89427,{"date":220,"score":208,"percentile":221},"2025-12-14",0.8943,{"date":223,"score":208,"percentile":224},"2025-12-15",0.89431,{"date":226,"score":208,"percentile":227},"2025-12-16",0.89423,{"date":229,"score":208,"percentile":230},"2025-12-17",0.89428,{"date":232,"score":208,"percentile":233},"2025-12-18",0.89436,{"date":235,"score":208,"percentile":236},"2025-12-19",0.89437,{"date":238,"score":208,"percentile":233},"2025-12-20",{"date":240,"score":208,"percentile":241},"2025-12-21",0.89443,{"date":243,"score":208,"percentile":241},"2025-12-22",{"date":245,"score":208,"percentile":246},"2025-12-23",0.89445,{"date":248,"score":208,"percentile":249},"2025-12-24",0.89451,{"date":251,"score":208,"percentile":252},"2025-12-25",0.89464,{"date":254,"score":208,"percentile":255},"2025-12-26",0.89463,{"date":257,"score":258,"percentile":259},"2025-12-27",0.04849,0.89243,{"date":261,"score":208,"percentile":262},"2025-12-28",0.89456,{"date":264,"score":208,"percentile":265},"2025-12-29",0.89453,{"date":267,"score":268,"percentile":269},"2025-12-30",0.05973,0.90358,{"date":271,"score":268,"percentile":272},"2025-12-31",0.90367,{"date":274,"score":275,"percentile":276},"2026-01-01",0.04007,0.88156,{"date":278,"score":275,"percentile":279},"2026-01-02",0.88152,{"date":281,"score":275,"percentile":282},"2026-01-03",0.88151,{"date":284,"score":268,"percentile":285},"2026-01-04",0.90366,{"date":287,"score":268,"percentile":288},"2026-01-05",0.90363,{"date":290,"score":268,"percentile":285},"2026-01-06",{"date":292,"score":268,"percentile":293},"2026-01-07",0.9037,{"date":295,"score":268,"percentile":296},"2026-01-08",0.90374,{"date":298,"score":268,"percentile":299},"2026-01-09",0.90375,{"date":301,"score":302,"percentile":303},"2026-01-10",0.05689,0.90125,{"date":305,"score":302,"percentile":306},"2026-01-11",0.90116,{"date":308,"score":302,"percentile":309},"2026-01-12",0.90115,{"date":311,"score":302,"percentile":312},"2026-01-13",0.90112,{"date":314,"score":302,"percentile":315},"2026-01-14",0.90127,{"date":317,"score":302,"percentile":318},"2026-01-15",0.90131,{"date":320,"score":302,"percentile":321},"2026-01-16",0.90133,{"date":323,"score":302,"percentile":318},"2026-01-17",{"date":325,"score":302,"percentile":326},"2026-01-18",0.90132,{"date":328,"score":302,"percentile":318},"2026-01-19",{"date":330,"score":302,"percentile":326},"2026-01-20",{"date":332,"score":302,"percentile":333},"2026-01-21",0.90135,{"date":335,"score":302,"percentile":336},"2026-01-22",0.90137,{"date":338,"score":302,"percentile":339},"2026-01-23",0.90145,{"date":341,"score":302,"percentile":342},"2026-01-24",0.9015,{"date":344,"score":302,"percentile":345},"2026-01-25",0.90151,{"date":347,"score":302,"percentile":348},"2026-01-26",0.90154,{"date":350,"score":302,"percentile":351},"2026-01-27",0.90157,{"date":353,"score":302,"percentile":354},"2026-01-28",0.90164,{"date":356,"score":302,"percentile":357},"2026-01-29",0.90163,{"date":359,"score":302,"percentile":360},"2026-01-30",0.90161,{"date":362,"score":302,"percentile":363},"2026-01-31",0.90168,{"date":365,"score":366,"percentile":367},"2026-02-01",0.03811,0.87865,[369],{"source":66,"cvss_v2_0":370,"cvss_v3_0":375,"cvss_v3_1":9,"cvss_v4_0":9},{"baseScore":371,"baseSeverity":9,"vectorString":372,"impactScore":373,"exploitabilityScore":374},7.5,"AV:N/AC:L/Au:N/C:P/I:P/A:P",6.4,10,{"baseScore":64,"baseSeverity":376,"vectorString":67,"impactScore":64,"exploitabilityScore":374},"CRITICAL",[378,387,395],{"ecosystem":9,"name":379,"vendor":380,"product":381,"cpe_part":382,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":383},"ubuntu linux","canonical","ubuntu_linux","o",[384],{"version":385,"is_range":60,"range_type":386,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"18.04","cpe",{"ecosystem":9,"name":388,"vendor":389,"product":390,"cpe_part":391,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":392},"storage automation store","netapp","storage_automation_store","a",[393],{"version":394,"is_range":60,"range_type":386,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"na",{"ecosystem":9,"name":396,"vendor":9,"product":396,"cpe_part":9,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":397},"PHP",[398],{"version":399,"is_range":400,"range_type":386,"version_start":401,"version_start_type":402,"version_end":403,"version_end_type":402,"fixed_in":9},"gte7.2.0_lte7.2.7",true,"7.2.0","including","7.2.7"]