Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libpng12 (UTSA-2026-093187)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093187 advisory. The pngsettext2 function in libpng 0.71 before 1.0.67, 1.2.x before 1.2.57, 1.4.x before 1.4.20, 1.5.x before 1.5.28, and 1.6.x before 1.6.27 allows context-dependen...

SUSE CVE-2013-7354

Multiple integer overflows in libpng before 1.5.14rc03 allow remote attackers to cause a denial of service crash via a crafted image to the 1 pngsetsPLT or 2 pngsettext2 function, which triggers a heap-based buffer overflow...

The vulnerability of the png_set_text_2 function in the libpng library, which allows a hacker to cause a service failure

The vulnerability of the pngsettext2 function in the libpng library is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure by loading a fragment of text into the PNG structure, removing the text, and then adding another tex...

CVE-2016-10087: NULL Pointer Dereference

The pngsettext2 function in libpng 0.71 before 1.0.67, 1.2.x before 1.2.57, 1.4.x before 1.4.20, 1.5.x before 1.5.28, and 1.6.x before 1.6.27 allows context-dependent attackers to cause a NULL pointer dereference vectors involving loading a text chunk into a png structure, removing the text, and...

libpng 'png_set_text_2()' function remote denial of service vulnerability

libpng is a PNG reference library that can create, read and write PNG graphics files. A remote denial of service vulnerability exists in the 'pngsettext2' function in Libpng versions prior to 1.6.27, which can be exploited by an attacker to execute arbitrary code in the context of an application,...

Updated libpng packages fix two security vulnerabilities

Updated libpng12 packages fix security vulnerabilities: An integer overflow leading to a heap-based buffer overflow was found in the pngsetsPLT and pngsettext2 API functions of libpng. An attacker could create a specially-crafted image file and render it with an application written to explicitly...

CVE-2013-7354: Heap-based Buffer Overflow

Multiple integer overflows in libpng before 1.5.14rc03 allow remote attackers to cause a denial of service crash via a crafted image to the 1 pngsetsPLT or 2 pngsettext2 function, which triggers a heap-based buffer overflow...

SuSE 10 Security Update : libpng (ZYPP Patch Number 8043)

The following security issue has been fixed : - specially crafted png files could have caused a memory corruption in libpng's pngsettext2 function. CVE-2011-3048 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

Heap overflow

The pngsettext2 function in pngset.c in libpng 1.0.x before 1.0.59, 1.2.x before 1.2.49, 1.4.x before 1.4.11, and 1.5.x before 1.5.10 allows remote attackers to cause a denial of service crash or execute arbitrary code via a crafted text chunk in a PNG image file, which triggers a memory allocati...

CVE-2011-3048

CVE-2011-3048 affects libpng via the png_set_text_2() routine in libpng, where crafted PNG text chunks can trigger a memory allocation failure, causing a heap-based buffer overflow that may crash or allow arbitrary code execution. Impact applies to libpng 1.0.x < 1.0.59, 1.2.x < 1.2.49, 1.4...

CVE-2011-3048: Improper Restriction of Operations within the Bounds of a Memory Buffer

The pngsettext2 function in pngset.c in libpng 1.0.x before 1.0.59, 1.2.x before 1.2.49, 1.4.x before 1.4.11, and 1.5.x before 1.5.10 allows remote attackers to cause a denial of service crash or execute arbitrary code via a crafted text chunk in a PNG image file, which triggers a memory allocati...

libpng: memory corruption flaw

The pngsettext2 function in pngset.c in libpng 1.0.x before 1.0.59, 1.2.x before 1.2.49, 1.4.x before 1.4.11, and 1.5.x before 1.5.10 allows remote attackers to cause a denial of service crash or execute arbitrary code via a crafted text chunk in a PNG image file, which triggers a memory allocati...