CVE-2014-3670

CVE-2014-3670 is a heap memory corruption vulnerability in the EXIF extension of PHP versions before 5.4.34, 5.5.18, and 5.6.2. It allows remote attackers to cause a denial of service or potentially execute arbitrary code by processing a crafted JPEG image with malformed TIFF thumbnail data. The vulnerability has a CVSS score of 6.8, indicating moderate severity, with a network attack vector and medium complexity, leading to potential partial confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit or ExploitDB, though it has garnered some community discussion and media coverage.