CVE-2018-14550

An issue has been found in third-party PNM decoding associated with libpng 1.6.35. It is a stack-based buffer overflow in the function gettoken in pnm2png.c in pnm2png...

EulerOS 2.0 SP8 : libpng (EulerOS-SA-2020-1015)

According to the version of the libpng packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An issue has been found in third-party PNM decoding associated with libpng 1.6.35. It is a stack-based buffer overflow in the function gettoken in...

CVE-2019-6129

A memory leak was found in the pngcp.c utility of libpng. The pngcp utility fails to free the pnginfo structure allocated by pngcreateinfostruct before exiting...

Security Bulletin: Multiple Vulnerabilities in libpng affects IBM Watson Studio Local

Summary Multiple vulnerabilities in libpng affects IBM Watson Studio Local Vulnerability Details CVEID: CVE-2018-13785 DESCRIPTION: In libpng 1.6.34, a wrong calculation of rowfactor in the pngcheckchunklength function pngrutil.c may trigger an integer overflow and resultant divide-by-zero while...

CVE-2018-13785

In libpng 1.6.34, a wrong calculation of rowfactor in the pngcheckchunklength function pngrutil.c may trigger an integer overflow and resultant divide-by-zero while processing a crafted PNG file, leading to a denial of service...

Security Bulletin: Multiple Vulnerabilities in libpng affects IBM Watson Studio Local

Summary Multiple vulnerabilities in libpng affects IBM Watson Studio Local Vulnerability Details CVEID: CVE-2018-14048 DESCRIPTION: An issue has been found in libpng 1.6.34. It is a SEGV in the function pngfreedata in png.c, related to the recommended error handling for pngreadimage. CVSS Base...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM i.

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition that is used by IBM i. Vulnerability Details CVEID: CVE-2016-0483 DESCRIPTION: An unspecified vulnerability in Oracle Java SE Java SE Embedded and Jrockit related to the AWT component has complete confidentiality...

EulerOS 2.0 SP2 : libpng (EulerOS-SA-2019-2383)

According to the versions of the libpng packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Integer overflow in the pngsetunknownchunks function in libpng/pngset.c in libpng before 1.5.14beta08 allows context-dependent attackers to caus...

EulerOS Virtualization for ARM 64 3.0.3.0 : libpng (EulerOS-SA-2019-2331)

According to the versions of the libpng package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - In libpng 1.6.34, a wrong calculation of rowfactor in the pngcheckchunklength function pngrutil.c may trigger an intege...

EulerOS 2.0 SP3 : libpng (EulerOS-SA-2019-2247)

According to the versions of the libpng packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Integer overflow in the pngsetunknownchunks function in libpng/pngset.c in libpng before 1.5.14beta08 allows context-dependent attackers to caus...

ALEA-2019:3426 libpng15 bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect z/TPF

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 8 used by the z/TPF system. z/TPF has addressed the applicable CVEs. Vulnerability Details If you run your own Java code using the IBM Java Runtime delivered with this product, you should evaluate your code to...

libpng Memory Leak Vulnerability

libpng is a PNG reference library that can create, read and write PNG graphics files. A memory leak vulnerability exists in libpng version 1.6.37, which originates from memory leaks in the 'pngmallocwarn' function and the 'pngmallocwarn' function, and can be exploited by an attacker to to obtain...

The vulnerability of the png_image_free function in the PNG bitmap handling library libpng, which allows a hacker to cause a service failure.

The vulnerability of the pngimagefree function in the PNG bitmap handling library libpng is related to the call to the freed memory area by the destructor of pngimagefreefunction. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2019-9423

In opencv calls that use libpng, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges required. User interaction is not required for exploitation. Product: AndroidVersions: Android-10Android...

CVE-2019-9423

In opencv calls that use libpng, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges required. User interaction is not required for exploitation. Product: AndroidVersions: Android-10Android...

CVE-2019-9423

In opencv calls that use libpng, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges required. User interaction is not required for exploitation. Product: AndroidVersions: Android-10Android...

UBUNTU-CVE-2019-9423

In opencv calls that use libpng, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges required. User interaction is not required for exploitation. Product: AndroidVersions: Android-10Android...

Out-of-bounds

In opencv calls that use libpng, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges required. User interaction is not required for exploitation. Product: AndroidVersions: Android-10Android...

CVE-2019-9423

The CVE-2019-9423 entry concerns an out-of-bounds write in OpenCV when using libpng, caused by a missing bounds check. Impact is local privilege escalation on Android 10, with no user interaction required. Public details specify the affected product as Android 10 (Android ID A-110986616); there i...