Linux Distros Unpatched Vulnerability : CVE-2019-9423

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In opencv calls that use libpng, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no...

Linux Distros Unpatched Vulnerability : CVE-2017-12652

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libpng before 1.6.32 does not properly check the length of chunks against the user limit. CVE-2017-12652 Note that Nessus relies on the presence of the package ...

Linux Distros Unpatched Vulnerability : CVE-2021-4214

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap overflow flaw was found in libpngs' pngimage.c program. This flaw allows an attacker with local network access to pass a specially crafted PNG file to th...

Linux Distros Unpatched Vulnerability : CVE-2019-7317

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pngimagefree in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because pngimagefreefunction is called under pngsafeexecute. CVE-2019-7317 Note that...

PT-2025-47830

Name of the Vulnerable Software and Affected Versions LIBPNG versions 1.6.0 through 1.6.50 Description LIBPNG is a library used by applications to read, create, and manipulate PNG image files. A heap buffer over-read issue exists in the png write image 8bit function when processing 8-bit images...

PT-2025-47831

Name of the Vulnerable Software and Affected Versions libpng versions 1.6.0 through 1.6.50 libpng1.6 affected versions not specified Description The libpng PNG library contains a flaw that could lead to information leaks, denial of service, or potentially the execution of arbitrary code when...

PT-2025-47829

Name of the Vulnerable Software and Affected Versions libpng versions prior to 1.6.51 libpng1.6 versions prior to 1.6.39-2+deb12u1 libpng1.6 versions prior to 1.6.48-1+deb13u1 libpng12-0 versions prior to 1.6.52-alt1 Description LIBPNG is a library used for reading, creating, and manipulating PNG...

CVE-2019-14373

An issue was discovered in imagesavepng in image/image-png.cpp in Free Lossless Image Format FLIF 0.3. Attackers can trigger a heap-based buffer over-read in libpng via a crafted flif file...

EulerOS Virtualization 2.12.0 : syslinux (EulerOS-SA-2025-1566)

According to the versions of the syslinux packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Integer underflow in the pngcheckkeyword function in pngwutil.c in libpng 0.90 through 0.99, 1.0.x before 1.0.66, 1.1.x and 1.2.x...

SUSE CVE-2010-0205

The pngdecompresschunk function in pngrutil.c in libpng 1.0.x before 1.0.53, 1.2.x before 1.2.43, and 1.4.x before 1.4.1 does not properly handle compressed ancillary-chunk data that has a disproportionately large uncompressed representation, which allows remote attackers to cause a denial of...

CVE-2011-3045

...

CVE-2011-2691

...

CVE-2011-2501

...

CVE-2009-5063 affecting package syslinux for versions less than libpng-1.2.39

CVE-2009-5063 affecting package syslinux for versions less than libpng-1.2.39. A patched version of the package is available...

CVE-2010-2249 affecting package syslinux for versions less than libpng-1.2.44

CVE-2010-2249 affecting package syslinux for versions less than libpng-1.2.44. A patched version of the package is available...

The libpng 0.71 allows context-dependent attackers to cause a NULL pointer dereference vectors

...

Multiple buffer overflows in libpng allow remote attackers to cause a denial of service

...

Buffer overflow in libpng allows remote attackers to cause a denial of service

...

libpng before 1.6.32 does not properly check the length of chunks against the user limit.

...

Linux Distros Unpatched Vulnerability : CVE-2016-10087

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The pngsettext2 function in libpng 0.71 before 1.0.67, 1.2.x before 1.2.57, 1.4.x before 1.4.20, 1.5.x before 1.5.28, and 1.6.x before 1.6.27 allows...