LibPNG_OSS-Fuzz

Фаззинг и анализ уязвимостей libpng Групповой проект по исследованию безопасности О фаззинге: Фаззинг — это автоматизированная техника тестирования ПО, при которой на вход программы подаются недопустимые, неожиданные или случайные данные для обнаружения ошибок и уязвимостей. Фаззинг с управлением...

CVE-2010-1205

Пример эксплуатации уязвимости CVE-2010-1205 в libpng =1.4.2 gregbook - набор примеров программ, распространяемых с исходниками libpng generate - генерирует вредоносный png-файл, вызывающий переполнение кучи heap-overflow при чтении файла с помощью libpng шаги для воспроизведения: ./build.sh сбор...

CVE-2025-64720-PoC

CVE-2025-64720: Переполнение буфера в libpng при предумножении палитры Статус : Исправлено Серьёзность : Высокая Идентификатор CVE : CVE-2025-64720 Дата обнаружения : 2025-11-XX Публичное раскрытие : 2025-11-21 Обзор Краткое описание Уязвимость чтения за пределами границ существует в функции...

CVE-2025-65018_Exploit_Challenge

CVE-2025-65018 CTFチャレンジ: "PNG Panic" このチャレンジは、libpng の実世界のバッファオーバーフロー脆弱性に基づいています（具体的には、16ビットのインターレース画像を処理する際の簡易API pngimagefinishread に関するものです）。 🚩 チャレンジの目標 提供される脆弱なバイナリ victim は、静的にリンクされた脆弱なバージョンの libpng を使用しています。このアプリケーションは、exploit.png という名前のPNGファイルをバッファに読み込みます。...

CVE-2025-65018-Heap-buffer-overflow-in-libpng-ps4-ps5-

CVE-2025-65018-Heap-buffer-overflow-in-libpng-ps4-ps5-에 대한 Poc 사용법: 1- 공유 버튼을 누르고 스크린샷을 찍습니다. 2- FTP를 사용하여 경로: /user/avcontents/photo/NPXS20001/NPXS20001/XXX/ 로 이동하면 찍은 스크린샷을 찾을 수 있습니다. 3- PC에 복사하고 makepng.py를 실행하면 poc.png가 출력됩니다. 4- 스크린샷 이름으로 변경한 후 FTP를 사용하여 동일한 경로에 덮어씁니다. 5- 갤러리에서 열어보면 오류가 발생합니...

cups-filters security update

1.28.7-27.0.1 - header/footer not being printed in banner page. Orabug: 28265099 [email protected] - Fixes Orabug: 29163824 source indentation not following convention [email protected] 1.28.7-27 - CVE-2026-64612 cups-filters: handle libpng errors via longjmp/setjmp to prevent process abo...

Oracle Linux 8 : cups-filters (ELSA-2026-57451)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-57451 advisory. 1.20.0-36.0.1.el810.1 - header/footer not being printed in banner page. Orabug: 28265099 [email protected] - Fixes Orabug: 29163824 source indentation not...

cups-filters security update

1.20.0-36.0.1.el810.1 - header/footer not being printed in banner page. Orabug: 28265099 [email protected] - Fixes Orabug: 29163824 source indentation not following convention [email protected] 1.20.0-36.1 - CVE-2026-64612 cups-filters: Handle libpng errors via longjmp/setjmp...

USN-8639-1 libpng, libpng1.6 vulnerabilities

Patrick Keshishian discovered that libpng incorrectly handled certain text chunks. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 16.04 LTS. CVE-2016-10087 It was discovered that libpng incorrectly handled certain malformed images. An...

USN-8639-1: libpng vulnerabilities

Patrick Keshishian discovered that libpng incorrectly handled certain text chunks. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 16.04 LTS. CVE-2016-10087 It was discovered that libpng incorrectly handled certain malformed images. An...

DEBIAN-CVE-2026-74552

In the Linux kernel, the following vulnerability has been resolved: hwmon: lm90 Only report alarms if driver is ready Userspace can read sysfs attributes before driver registration is complete, immediately after devmhwmondeviceregisterwithinfo has been called. At that time, data-hwmondev is not y...

DEBIAN-CVE-2026-74492

In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: do not update comments from kernel-side hash adds mtyperesize copies comment pointers with memcpy, not the comment objects themselves. During the window after an entry has been copied but before the table swap a...

DEBIAN-CVE-2026-74314

In the Linux kernel, the following vulnerability has been resolved: bpf: Cancel special fields on map value recycle Map update and delete paths currently call bpfobjfreefields when a value is being replaced or recycled. That makes field destruction depend on the context of the update/delete...

DEBIAN-CVE-2026-72491

In the Linux kernel, the following vulnerability has been resolved: net/9p: fix race condition on rdma-state in transrdma.c The rdma-state field is modified without holding reqlock in both recvdone and p9cmeventhandler, while rdmarequest accesses the same field under the reqlock spinlock. This...

DEBIAN-CVE-2026-72405

In the Linux kernel, the following vulnerability has been resolved: net: udptunnel: prevent double queueing in udptunnelnicdevicesync Yue Sun reported a use-after-free and debugobjects warning in udptunnelnicdevicesyncwork during concurrent device operations. The workqueue core clears the interna...

DEBIAN-CVE-2026-72272

In the Linux kernel, the following vulnerability has been resolved: fbdev: radeon: fix potential memory leak in radeonfbpciregister The function radeonfbpciregister allocates memory for modelist by calling radeoncheckmodes which calls fbaddvideomode. The memory is appended to info-modelist, but i...

DEBIAN-CVE-2026-72266

In the Linux kernel, the following vulnerability has been resolved: fbdev: vesafb: fix memory leak in vesafbprobe Since commit 73ce73c30ba9 "fbdev: Transfer video= option strings to caller; clarify ownership" the string returned from fbgetoptions is expected to be freed by the caller. But the...

DEBIAN-CVE-2026-72234

In the Linux kernel, the following vulnerability has been resolved: batman-adv: access unicastttvn skb-data only after skb realloc The pskbmaypull called by batadvgetvid could reallocate the buffer behind the skb. Variables which were pointing to the old buffer need to be reassigned to avoid an...

Alibaba Cloud Linux 3 : 0249: java-1.8.0-openjdk (ALINUX3-SA-2026:0249)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2026:0249 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2025-66293: LIBPNG is a reference...

Alibaba Cloud Linux 3 : 0248: java-17-openjdk (ALINUX3-SA-2026:0248)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2026:0248 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2025-66293: LIBPNG is a reference...