CVE-2008-6218

libpng: "png_handle_tEXt()" memory leak vulnerability - DoS (memory exhaustion) via a crafted PNG file.

Published Feb 20, 2009 CVSS 2.0 · 7.1 High EPSS 2.3% KEV · Not listed
Description
Memory leak in the png_handle_tEXt function in pngrutil.c in libpng before 1.2.33 rc02 and 1.4.0 beta36 allows context-dependent attackers to cause a denial of service (memory exhaustion) via a crafted PNG file.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-1750-1 New libpng packages fix several vulnerabilities
EUVD EUVD EUVD-2008-6188 Memory leak in the png_handle_tEXt function in pngrutil.c in libpng before 1.2.33 rc02 and 1.4.0 beta36 allows context-dependent attackers to cause a denial of service (memory exhaustion) via a crafted PNG file.
Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 11:20 AM
Reserved
Feb 20, 2009, 12:00 AM
Status
Modified
Published
Feb 20, 2009, 5:30 PM
Modified
Jun 16, 2026, 11:01 PM
Severity
Low
Public date
Oct 27, 2008, 12:00 AM