3549 matches found
EUVD-2021-34072
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2016-3751
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unspecified vulnerability in libpng before 1.6.20, as used in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01, allow...
Memory leak in the embedded_profile_len function in pngwutil.c in libpng before 1.2.39beta5 allows context-dependent attackers to cause a denial of service (memory leak or segmentation fault) via a JPEG image containing an iCCP chunk with a negative embedded profile length. NOTE: this is due to an incomplete fix for CVE-2006-7244.
...
The png_set_text_2 function in pngset.c in libpng 1.0.x before 1.0.59, 1.2.x before 1.2.49, 1.4.x before 1.4.11, and 1.5.x before 1.5.10 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted text chunk in a PNG image file, which triggers a memory allocation failure that is not properly handled, leading to a heap-based buffer overflow.
...
Linux Distros Unpatched Vulnerability : CVE-2019-9423
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In opencv calls that use libpng, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no...
Linux Distros Unpatched Vulnerability : CVE-2017-12652
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libpng before 1.6.32 does not properly check the length of chunks against the user limit. CVE-2017-12652 Note that Nessus relies on the presence of the package ...
Linux Distros Unpatched Vulnerability : CVE-2021-4214
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap overflow flaw was found in libpngs' pngimage.c program. This flaw allows an attacker with local network access to pass a specially crafted PNG file to th...
Linux Distros Unpatched Vulnerability : CVE-2019-7317
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pngimagefree in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because pngimagefreefunction is called under pngsafeexecute. CVE-2019-7317 Note that...
PT-2025-47829
Name of the Vulnerable Software and Affected Versions libpng versions prior to 1.6.51 libpng1.6 versions prior to 1.6.39-2+deb12u1 libpng1.6 versions prior to 1.6.48-1+deb13u1 libpng12-0 versions prior to 1.6.52-alt1 Description LIBPNG is a library used for reading, creating, and manipulating PNG...
PT-2025-47831
Name of the Vulnerable Software and Affected Versions libpng versions 1.6.0 through 1.6.50 libpng1.6 affected versions not specified Description The libpng PNG library contains a flaw that could lead to information leaks, denial of service, or potentially the execution of arbitrary code when...
CVE-2019-14373
An issue was discovered in imagesavepng in image/image-png.cpp in Free Lossless Image Format FLIF 0.3. Attackers can trigger a heap-based buffer over-read in libpng via a crafted flif file...
EulerOS Virtualization 2.12.0 : syslinux (EulerOS-SA-2025-1566)
According to the versions of the syslinux packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Integer underflow in the pngcheckkeyword function in pngwutil.c in libpng 0.90 through 0.99, 1.0.x before 1.0.66, 1.1.x and 1.2.x...
SUSE CVE-2010-0205
The pngdecompresschunk function in pngrutil.c in libpng 1.0.x before 1.0.53, 1.2.x before 1.2.43, and 1.4.x before 1.4.1 does not properly handle compressed ancillary-chunk data that has a disproportionately large uncompressed representation, which allows remote attackers to cause a denial of...
CVE-2011-2691
...
CVE-2011-3045
...
CVE-2011-2501
...
CVE-2010-2249 affecting package syslinux for versions less than libpng-1.2.44
CVE-2010-2249 affecting package syslinux for versions less than libpng-1.2.44. A patched version of the package is available...
CVE-2009-5063 affecting package syslinux for versions less than libpng-1.2.39
CVE-2009-5063 affecting package syslinux for versions less than libpng-1.2.39. A patched version of the package is available...