Lucene search
+L

8 matches found

OSV
OSV
added 2026/06/04 4:16 p.m.15 views

ALPINE-CVE-2026-40930

LIBPNG is a reference library for use in applications that process PNG Portable Network Graphics raster image files. In version 1.8.0, three inter-frame chunk discard paths in the push-mode APNG parser clear the chunk-header flag without consuming the chunk body and CRC, allowing...

5.4CVSS5.4AI score0.00202EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/06/04 2:34 p.m.12 views

CVE-2026-40930

LIBPNG is a reference library for use in applications that process PNG Portable Network Graphics raster image files. In version 1.8.0, three inter-frame chunk discard paths in the push-mode APNG parser clear the chunk-header flag without consuming the chunk body and CRC, allowing...

5.4CVSS5.8AI score0.00202EPSS
SaveExploits0References3Affected Software2
AlpineLinux
AlpineLinux
added 2026/06/04 2:34 p.m.22 views

CVE-2026-40930

LIBPNG is a reference library for use in applications that process PNG Portable Network Graphics raster image files. In version 1.8.0, three inter-frame chunk discard paths in the push-mode APNG parser clear the chunk-header flag without consuming the chunk body and CRC, allowing...

5.4CVSS5.8AI score0.00202EPSS
SaveExploits0
CVE
CVE
added 2026/06/04 2:34 p.m.94 views

CVE-2026-40930

CVE-2026-40930 concerns LIBPNG (v1.8.0) where three inter-frame chunk discard paths in the push-mode APNG parser clear the chunk-header flag without consuming the chunk body and CRC. This allows attacker-controlled bytes inside an ignored ancillary chunk to be reinterpreted as a fresh chunk heade...

5.4CVSS5.8AI score0.00202EPSS
SaveExploits0References3
OSV
OSV
added 2026/06/04 2:34 p.m.9 views

CVE-2026-40930 LIBPNG: Chunk smuggling in push-mode APNG parser via unconsumed chunk body

LIBPNG is a reference library for use in applications that process PNG Portable Network Graphics raster image files. In version 1.8.0, three inter-frame chunk discard paths in the push-mode APNG parser clear the chunk-header flag without consuming the chunk body and CRC, allowing...

5.4CVSS5.9AI score
SaveExploits0References5
OSV
OSV
added 2026/05/29 11:11 a.m.6 views

OESA-2026-2533 libpng security update

The libpng package contains libraries used by other programs for reading and writing PNG format files. The PNG format was designed as a replacement for GIF and, to a lesser extent, TIFF, with many improvements and extensions and lack of patent problems. Security Fixes: 'Hello, everyone,\n\nThis i...

5.4CVSS7.5AI score0.00202EPSS
SaveExploits0References2
OSV
OSV
added 2026/05/29 11:11 a.m.5 views

OESA-2026-2535 libpng security update

The libpng package contains libraries used by other programs for reading and writing PNG format files. The PNG format was designed as a replacement for GIF and, to a lesser extent, TIFF, with many improvements and extensions and lack of patent problems. Security Fixes: 'Hello, everyone,\n\nThis i...

5.4CVSS7.5AI score0.00202EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/05/16 12:00 a.m.21 views

PT-2026-42116

Name of the Vulnerable Software and Affected Versions libpng-apng affected versions not specified Description An issue exists in the push-mode APNG parser where chunk smuggling is possible via an unconsumed chunk body. This occurs within the third-party libpng-apng patch. Recommendations At the...

5.4CVSS5.8AI score0.00202EPSS
SaveExploits0References12
Rows per page
Query Builder