2 matches found
SUSE CVE-2006-5793
The sPLT chunk handling code pngsetsPLT function in pngset.c in libpng 1.0.6 through 1.2.12 uses a sizeof operator on the wrong data type, which allows context-dependent attackers to cause a denial of service crash via malformed sPLT chunks that trigger an out-of-bounds read...
2.6CVSS8.6AI score0.01775EPSS
SaveExploits1References5
libpng DoS
The sPLT chunk handling code pngsetsPLT function in pngset.c in libpng 1.0.6 through 1.2.12 uses a sizeof operator on the wrong data type, which allows context-dependent attackers to cause a denial of service crash via malformed sPLT chunks that trigger an out-of-bounds read...
2.6CVSS7.2AI score0.01775EPSS
SaveExploits1References4
20