CVE-2016-10087

libpng: NULL pointer dereference in png_set_text_2()

Published Jan 30, 2017 CVSS 3.0 · 7.5 High EPSS 5.1% KEV · Not listed
Description
The png_set_text_2 function in libpng 0.71 before 1.0.67, 1.2.x before 1.2.57, 1.4.x before 1.4.20, 1.5.x before 1.5.28, and 1.6.x before 1.6.27 allows context-dependent attackers to cause a NULL pointer dereference vectors involving loading a text chunk into a png structure, removing the text, and then adding another text chunk to the structure.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2016-1279 The png_set_text_2 function in libpng 0.71 before 1.0.67, 1.2.x before 1.2.57, 1.4.x before 1.4.20, 1.5.x before 1.5.28, and 1.6.x before 1.6.27 allows context-dependent attackers to cause a NULL pointer dereference vectors involving loading a text chunk into a png structure, removing the text, and then adding another text chunk to the structure.
Ubuntu USN Ubuntu USN USN-3712-1 libpng vulnerabilities
Ubuntu USN Ubuntu USN USN-3712-2 libpng vulnerability
History
Type Values Removed Values Added
Metrics epss

{'score': 0.01524}

epss

{'score': 0.01851}

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 6, 2024, 3:07 AM
Reserved
Dec 30, 2016, 12:00 AM
Status
Modified
Published
Jan 30, 2017, 10:59 PM
Modified
Jun 17, 2026, 12:39 AM
Severity
Low
Public date
Dec 29, 2016, 12:00 AM