Lucene search
+L

143 matches found

OSV
OSV
•added 2026/06/04 4:16 p.m.•12 views

AZL-89504 CVE-2026-40930 affecting package gdal 3.6.3-2

LIBPNG is a reference library for use in applications that process PNG Portable Network Graphics raster image files. In version 1.8.0, three inter-frame chunk discard paths in the push-mode APNG parser clear the chunk-header flag without consuming the chunk body and CRC, allowing...

5.4CVSS7.2AI score0.00355EPSS
SaveExploits0References1
OSV
OSV
•added 2026/06/04 4:16 p.m.•19 views

ALPINE-CVE-2026-40930

LIBPNG is a reference library for use in applications that process PNG Portable Network Graphics raster image files. In version 1.8.0, three inter-frame chunk discard paths in the push-mode APNG parser clear the chunk-header flag without consuming the chunk body and CRC, allowing...

5.4CVSS7.2AI score0.00355EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/06/04 2:34 p.m.•14 views

CVE-2026-40930

LIBPNG is a reference library for use in applications that process PNG Portable Network Graphics raster image files. In version 1.8.0, three inter-frame chunk discard paths in the push-mode APNG parser clear the chunk-header flag without consuming the chunk body and CRC, allowing...

5.4CVSS5.8AI score0.00355EPSS
SaveExploits0References3Affected Software2
AlpineLinux
AlpineLinux
•added 2026/06/04 2:34 p.m.•28 views

CVE-2026-40930

LIBPNG is a reference library for use in applications that process PNG Portable Network Graphics raster image files. In version 1.8.0, three inter-frame chunk discard paths in the push-mode APNG parser clear the chunk-header flag without consuming the chunk body and CRC, allowing...

5.4CVSS7.2AI score0.00355EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2026/06/04 2:34 p.m.•20 views

CVE-2026-40930 LIBPNG: Chunk smuggling in push-mode APNG parser via unconsumed chunk body

LIBPNG is a reference library for use in applications that process PNG Portable Network Graphics raster image files. In version 1.8.0, three inter-frame chunk discard paths in the push-mode APNG parser clear the chunk-header flag without consuming the chunk body and CRC, allowing...

5.4CVSS5.8AI score0.00355EPSS
SaveExploits0References2
CVE
CVE
•added 2026/06/04 2:34 p.m.•115 views

CVE-2026-40930

CVE-2026-40930 concerns LIBPNG (v1.8.0) where three inter-frame chunk discard paths in the push-mode APNG parser clear the chunk-header flag without consuming the chunk body and CRC. This allows attacker-controlled bytes inside an ignored ancillary chunk to be reinterpreted as a fresh chunk heade...

5.4CVSS5.8AI score0.00355EPSS
SaveExploits0References3
OSV
OSV
•added 2026/06/04 2:34 p.m.•17 views

CVE-2026-40930 LIBPNG: Chunk smuggling in push-mode APNG parser via unconsumed chunk body

LIBPNG is a reference library for use in applications that process PNG Portable Network Graphics raster image files. In version 1.8.0, three inter-frame chunk discard paths in the push-mode APNG parser clear the chunk-header flag without consuming the chunk body and CRC, allowing...

5.4CVSS5.9AI score
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/04 12:00 a.m.•1 views

CVE-2026-40930: Interpretation Conflict

LIBPNG is a reference library for use in applications that process PNG Portable Network Graphics raster image files. In version 1.8.0, three inter-frame chunk discard paths in the push-mode APNG parser clear the chunk-header flag without consuming the chunk body and CRC, allowing...

5.4CVSS5.8AI score0.00355EPSS
SaveExploits0References2
OSV
OSV
•added 2026/05/29 11:11 a.m.•6 views

OESA-2026-2534 libpng security update

The libpng package contains libraries used by other programs for reading and writing PNG format files. The PNG format was designed as a replacement for GIF and, to a lesser extent, TIFF, with many improvements and extensions and lack of patent problems. Security Fixes: 'Hello, everyone,\n\nThis i...

5.4CVSS5.7AI score0.00355EPSS
SaveExploits0References2
OSV
OSV
•added 2026/05/29 11:11 a.m.•16 views

OESA-2026-2535 libpng security update

The libpng package contains libraries used by other programs for reading and writing PNG format files. The PNG format was designed as a replacement for GIF and, to a lesser extent, TIFF, with many improvements and extensions and lack of patent problems. Security Fixes: 'Hello, everyone,\n\nThis i...

5.4CVSS7.5AI score0.00355EPSS
SaveExploits0References2
OSV
OSV
•added 2026/05/29 11:11 a.m.•15 views

OESA-2026-2533 libpng security update

The libpng package contains libraries used by other programs for reading and writing PNG format files. The PNG format was designed as a replacement for GIF and, to a lesser extent, TIFF, with many improvements and extensions and lack of patent problems. Security Fixes: 'Hello, everyone,\n\nThis i...

5.4CVSS7.5AI score0.00355EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2026/05/23 8:34 p.m.•36 views

libpng: libpng: Data integrity and availability impact due to improper APNG chunk handling

A flaw was found in libpng, a library used for processing PNG Portable Network Graphics image files. In version 1.8.0, a remote attacker could provide a specially crafted APNG Animated Portable Network Graphics file. This flaw allows attacker-controlled data within an ignored chunk to be...

5.4CVSS7AI score0.00355EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/05/16 12:00 a.m.•26 views

PT-2026-42116

Name of the Vulnerable Software and Affected Versions libpng-apng affected versions not specified Description An issue exists in the push-mode APNG parser where chunk smuggling is possible via an unconsumed chunk body. This occurs within the third-party libpng-apng patch. Recommendations At the...

5.4CVSS5.8AI score0.00355EPSS
SaveExploits0References36
OSV
OSV
•added 2025/10/19 7:08 p.m.•7 views

JLSEC-2025-113 Buffer Overflow vulnerability exists in FFmpeg 4.1 via `apng_do_inverse_blend` in...

Buffer Overflow vulnerability exists in FFmpeg 4.1 via apngdoinverseblend in libavcodec/pngenc.c, which could let a remote malicious user cause a Denial of Service...

7.5CVSS6.7AI score0.02068EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2019-15575

Malware in sbrugna...

8.8CVSS6.3AI score0.02028EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2021-23287

Malware in sbrugna...

6.5CVSS6.5AI score0.01221EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
•added 2025/08/24 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2017-6960

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in apng2gif 1.7. There is an integer overflow resulting in a heap-based buffer over-read, related to the loadapng function and the...

7.5CVSS7.2AI score0.01804EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/05/22 6:42 p.m.•15 views

CVE-2021-36692

libjxl v0.3.7 is affected by a Divide By Zero in issue in lib/extras/codecapng.cc jxl::DecodeImageAPNG. When encoding a malicous APNG file using cjxl, an attacker can trigger a denial of service...

6.5CVSS6.8AI score0.01221EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/22 8:30 a.m.•16 views

CVE-2019-6007

Integer overflow vulnerability in apng-drawable 1.0.0 to 1.6.0 allows an attacker to cause a denial of service DoS condition or execute arbitrary code via unspecified vectors...

8.8CVSS8.1AI score0.02028EPSS
SaveExploits0References1
OSV
OSV
•added 2023/04/17 3:15 p.m.•17 views

CVE-2023-27705

APNGOptimizer v1.4 was discovered to contain a buffer overflow via the component /apngopt/ubuntu.png...

7.5CVSS6.1AI score0.00838EPSS
SaveExploits1References2
Rows per page
Query Builder