According to its banner, the version of PHP running on the remote web server is 7.2.x prior to 7.2.17. It is, therefore, affected by multiple vulnerabilities:- A heap-based buffer over-read condition exists in php_ifd_get32s in exif.c.- A heap-based buffer overflow condition exists in exif_iif_add_value in exif.c as a result of improperly checking input length.