EUVD-2018-5974

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Issue in libpng 1.6.34 causing SEGV in png_free_data function related to png_read_image error handling

Reporter	Title	Published	Views	Family All 47
ibm	Security Bulletin: Multiple Vulnerabilities in libpng affects IBM Watson Studio Local	18 Dec 201917:42	–	ibm
alpinelinux	CVE-2018-14048	13 Jul 201816:00	–	alpinelinux
cnvd	libpng Denial of Service Vulnerability (CNVD-2018-20558)	17 Jul 201800:00	–	cnvd
cve	CVE-2018-14048	13 Jul 201816:00	–	cve
cvelist	CVE-2018-14048	13 Jul 201816:00	–	cvelist
debiancve	CVE-2018-14048	13 Jul 201816:00	–	debiancve
nessus	GLSA-201908-02 : libpng: Multiple vulnerabilities	12 Aug 201900:00	–	nessus
nessus	Photon OS 1.0: Openjdk11 PHSA-2020-1.0-0290	29 Apr 202000:00	–	nessus
nessus	Photon OS 3.0: Openjdk11 PHSA-2020-3.0-0084	29 Apr 202000:00	–	nessus
nessus	Photon OS 3.0: Syslinux PHSA-2023-3.0-0602	24 Jul 202400:00	–	nessus

[
  {
    "enisaIdVendor": [
      {
        "id": "54b2c88b-85d5-3b2a-9a0c-7388f0b3e555",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "523127b2-5859-3558-ac65-afdbdb7bec67",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
suse	www.suse.com/security/cve/CVE-2018-14048.html
ubuntu	www.ubuntu.com/security/CVE-2018-14048
github	www.github.com/fouzhe/security/tree/master/libpng
github	www.github.com/glennrp/libpng/issues/238
oracle	www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
seclists	www.seclists.org/bugtraq/2019/Apr/30
packetstormsecurity	www.packetstormsecurity.com/files/152561/Slackware-Security-Advisory-libpng-Updates.html
security	www.security.gentoo.org/glsa/201908-02
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

6Medium risk

Vulners AI Score6

CVSS 3.16.5

CVSS 24.3

EPSS0.03009