Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 31

Export CSV
CVE-2015-8126

libpng: Buffer overflow vulnerabilities in png_get_PLTE/png_set_PLTE functions

Multiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x before 1.5.24, and 1.6.x before 1.6.19 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a small bit-depth value in an IHDR (aka image header) chunk in a PNG image.

CVSS 2.0 · 7.5 High EPSS 10.3% KEV · Not listed
Vendors
Apple Canonical Debian and 6 more
Products
Mac Os X Ubuntu Linux Debian Linux and 21 more
CVE-2018-13785

libpng: Integer overflow and resultant divide-by-zero in pngrutil.c:png_check_chunk_length() allows for denial of service

In libpng 1.6.34, a wrong calculation of row_factor in the png_check_chunk_length function (pngrutil.c) may trigger an integer overflow and resultant divide-by-zero while processing a crafted PNG file, leading to a denial of service.

CVSS 3.1 · 6.5 Medium EPSS 4.4% KEV · Not listed
Vendors
Canonical Libpng Oracle and 1 more
Products
Ubuntu Linux Libpng Jdk and 7 more
CVE-2009-0040

libpng arbitrary free() flaw

The PNG reference library (aka libpng) before 1.0.43, and 1.2.x before 1.2.35, as used in pngcrush and other applications, allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PNG file that triggers a free of an uninitialized pointer in (1) the png_read_png function, (2) pCAL chunk handling, or (3) setup of 16-bit gamma tables.

CVSS 2.0 · 6.8 Medium EPSS 4.8% KEV · Not listed
Vendors
Apple Debian Fedoraproject and 4 more
Products
Iphone Os Mac Os X Debian Linux and 7 more
CVE-2009-2042

libpng: Interlaced Images Information Disclosure Vulnerability

libpng before 1.2.37 does not properly parse 1-bit interlaced images with width values that are not divisible by 8, which causes libpng to include uninitialized bits in certain rows of a PNG file and might allow remote attackers to read portions of sensitive memory via "out-of-bounds pixels" in the file.

CVSS 2.0 · 4.3 Medium EPSS 2.3% KEV · Not listed
Vendors
Libpng Redhat
Products
Libpng Enterprise Linux
CVE-2006-5793

libpng DoS

The sPLT chunk handling code (png_set_sPLT function in pngset.c) in libpng 1.0.6 through 1.2.12 uses a sizeof operator on the wrong data type, which allows context-dependent attackers to cause a denial of service (crash) via malformed sPLT chunks that trigger an out-of-bounds read.

CVSS 2.0 · 2.6 Low EPSS 1.9% KEV · Not listed
Vendors
Greg Roelofs Redhat
Products
Libpng Enterprise Linux
CVE-2007-5269

libpng DoS via multiple out-of-bounds reads

Certain chunk handlers in libpng before 1.0.29 and 1.2.x before 1.2.21 allow remote attackers to cause a denial of service (crash) via crafted (1) pCAL (png_handle_pCAL), (2) sCAL (png_handle_sCAL), (3) tEXt (png_push_read_tEXt), (4) iTXt (png_handle_iTXt), and (5) ztXT (png_handle_ztXt) chunking in PNG images, which trigger out-of-bounds read operations.

CVSS 2.0 · 5.0 Medium EPSS 4.8% KEV · Not listed
Vendors
Libpng Redhat
Products
Libpng Enterprise Linux
CVE-2008-1382

libpng unknown chunk handling flaw

libpng 1.0.6 through 1.0.32, 1.2.0 through 1.2.26, and 1.4.0beta01 through 1.4.0beta19 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a PNG file with zero length "unknown" chunks, which trigger an access of uninitialized memory.

CVSS 2.0 · 7.5 High EPSS 5.5% KEV · Not listed
Vendors
Libpng Redhat
Products
Libpng Enterprise Linux
CVE-2002-0660

security flaw

Buffer overflow in libpng 1.0.12-3.woody.2 and libpng3 1.2.1-1.1.woody.2 on Debian GNU/Linux 3.0, and other operating systems, may allow attackers to cause a denial of service and possibly execute arbitrary code, a different vulnerability than CVE-2002-0728.

CVSS 2.0 · 7.5 High EPSS 3.0% KEV · Not listed
Vendors
Greg Roelofs Redhat
Products
Libpng Libpng3 Enterprise Linux and 1 more
CVE-2002-0728

security flaw

Buffer overflow in the progressive reader for libpng 1.2.x before 1.2.4, and 1.0.x before 1.0.14, allows attackers to cause a denial of service (crash) via a PNG data stream that has more IDAT data than indicated by the IHDR chunk.

CVSS 2.0 · 5.0 Medium EPSS 2.1% KEV · Not listed
Vendors
Greg Roelofs Redhat
Products
Libpng Enterprise Linux Linux
CVE-2002-1363

security flaw

Portable Network Graphics (PNG) library libpng 1.2.5 and earlier does not correctly calculate offsets, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a buffer overflow attack on the row buffers.

CVSS 2.0 · 7.5 High EPSS 6.1% KEV · Not listed
Vendors
Greg Roelofs Redhat
Products
Libpng Enterprise Linux Linux
CVE-2004-0421

CAN-2004-0421 libpng can access out of bounds memory

The Portable Network Graphics library (libpng) 1.0.15 and earlier allows attackers to cause a denial of service (crash) via a malformed PNG image file that triggers an error that causes an out-of-bounds read when creating the error message.

CVSS 2.0 · 5.0 Medium EPSS 4.1% KEV · Not listed
Vendors
Libpng Openpkg Redhat and 1 more
Products
Libpng Openpkg Enterprise Linux and 4 more
CVE-2004-0597

security flaw

Multiple buffer overflows in libpng 1.2.5 and earlier, as used in multiple products, allow remote attackers to execute arbitrary code via malformed PNG images in which (1) the png_handle_tRNS function does not properly validate the length of transparency chunk (tRNS) data, or the (2) png_handle_sBIT or (3) png_handle_hIST functions do not perform sufficient bounds checking.

CVSS 2.0 · 10.0 Critical EPSS 81.9% KEV · Not listed
Vendors
Greg Roelofs Microsoft Redhat
Products
Libpng Msn Messenger Windows 98se and 4 more
CVE-2004-0598

security flaw

The png_handle_iCCP function in libpng 1.2.5 and earlier allows remote attackers to cause a denial of service (application crash) via a certain PNG image that triggers a null dereference.

CVSS 2.0 · 5.0 Medium EPSS 6.1% KEV · Not listed
Vendors
Greg Roelofs Redhat
Products
Libpng Enterprise Linux
CVE-2004-0599

security flaw

Multiple integer overflows in the (1) png_read_png in pngread.c or (2) png_handle_sPLT functions in pngrutil.c or (3) progressive display image reading capability in libpng 1.2.5 and earlier allow remote attackers to cause a denial of service (application crash) via a malformed PNG image.

CVSS 2.0 · 5.0 Medium EPSS 6.2% KEV · Not listed
Vendors
Greg Roelofs Redhat
Products
Libpng Enterprise Linux
CVE-2006-0481

security flaw

Heap-based buffer overflow in the alpha strip capability in libpng 1.2.7 allows context-dependent attackers to cause a denial of service (crash) when the png_do_strip_filler function is used to strip alpha channels out of the image.

CVSS 2.0 · 5.0 Medium EPSS 3.1% KEV · Not listed
Vendors
Greg Roelofs Redhat
Products
Libpng Enterprise Linux
CVE-2013-6954

libpng: unhandled zero-length PLTE chunk or NULL palette

The png_do_expand_palette function in libpng before 1.6.8 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via (1) a PLTE chunk of zero bytes or (2) a NULL palette, related to pngrtran.c and pngset.c.

CVSS 3.1 · 6.5 Medium EPSS 4.7% KEV · Not listed
Vendors
Libpng Redhat
Products
Libpng Network Satellite Rhel Extras and 1 more
CVE-2011-3045

libpng: buffer overflow in png_inflate caused by invalid type conversions

Integer signedness error in the png_inflate function in pngrutil.c in libpng before 1.4.10beta01, as used in Google Chrome before 17.0.963.83 and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PNG file, a different vulnerability than CVE-2011-3026.

CVSS 3.1 · 8.8 High EPSS 3.2% KEV · Not listed
Vendors
Debian Fedoraproject Google and 3 more
Products
Debian Linux Fedora Chrome and 10 more