LI
Product
libpng
58
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 18Medium 17Low 0
Watch
Add libpng to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2008-5907 | – | Jan 15 | The png_check_keyword function in pngwutil.c in libpng before 1.0.42, and 1.2.x before 1.2.34, might allow context-dependent attackers to set the value of an arbitrary memory… Affected: before 1.0.42; 1.2.0 before 1.2.34 |
| CVE-2008-3964 | – | Sep 11 | Multiple off-by-one errors in libpng before 1.2.32beta01, and 1.4 before 1.4.0beta34, allow context-dependent attackers to cause a denial of service (crash) or have unspecified… Affected: before 1.2.32; 1.4.0; 1.4.0; 1.4.0; 1.4.0; 1.4.0; +28 more |
| CVE-2008-1382 | – | Apr 14 | libpng 1.0.6 through 1.0.32, 1.2.0 through 1.2.26, and 1.4.0beta01 through 1.4.0beta19 allows context-dependent attackers to cause a denial of service (crash) and possibly execute… Affected: 1.0.6; 1.0.6; 1.0.6; 1.0.6; 1.0.6; 1.0.6; +34 more |
| CVE-2007-5268 | – | Oct 8 | pngrtran.c in libpng before 1.0.29 and 1.2.x before 1.2.21 use (1) logical instead of bitwise operations and (2) incorrect comparisons, which might allow remote attackers to cause… Affected: before 1.0.29; 1.2.0 before 1.2.21 |
| CVE-2007-5269 | – | Oct 8 | Certain chunk handlers in libpng before 1.0.29 and 1.2.x before 1.2.21 allow remote attackers to cause a denial of service (crash) via crafted (1) pCAL (png_handle_pCAL), (2) sCAL… Affected: through 1.2.20; 1.0.28 |
| CVE-2007-5267 | – | Oct 8 | Off-by-one error in ICC profile chunk handling in the png_set_iCCP function in pngset.c in libpng before 1.2.22 beta1 allows remote attackers to cause a denial of service (crash)… Affected: through 1.2.21 |
| CVE-2007-5266 | – | Oct 8 | Off-by-one error in ICC profile chunk handling in the png_set_iCCP function in pngset.c in libpng before 1.0.29 beta1 and 1.2.x before 1.2.21 beta1 allows remote attackers to… Affected: through 1.0.28; 1.2.0 through 1.2.20 |
| CVE-2004-0421 | – | Aug 18 | The Portable Network Graphics library (libpng) 1.0.15 and earlier allows attackers to cause a denial of service (crash) via a malformed PNG image file that triggers an error that… Affected: 1.0.0; 1.0.5; 1.0.6; 1.0.7; 1.0.8; 1.0.9; +11 more |