Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote attackers to execute arbitrary code via a PNG image that triggers an additional data row.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Itunes | — | Upgrade Apple iTunes to the latest version | Jun 25, 2026 | Jan 5, 2024 |
| Apple Osx Imageio | — | Upgrade macOS to the latest versionApply OS X security update 2010-007 | Dec 16, 2011 | Jun 30, 2010 |
| Apple Osx Php | — | Apply OS X security update 2010-005 | Dec 16, 2011 | Jun 30, 2010 |
| Apple Osx X11 | — | Upgrade macOS to the latest versionApply OS X security update 2010-007 | Dec 16, 2011 | Jun 30, 2010 |
| Apple Safari | — | Uninstall Apple Safari on WindowsUpgrade to Apple Safari version 5.0.4 | Jan 5, 2012 | Jun 30, 2010 |
| Centos_linux | — | Upgrade libpngUpgrade seamonkey-nspr-develUpgrade seamonkey-js-debuggerUpgrade seamonkey-mailUpgrade xulrunner-develUpgrade xulrunnerUpgrade libpng-develUpgrade firefoxUpgrade seamonkeyUpgrade thunderbirdUpgrade seamonkey-nssUpgrade seamonkey-develUpgrade libpng10-develUpgrade seamonkey-nss-develUpgrade libpng10Upgrade seamonkey-dom-inspectorUpgrade seamonkey-chatUpgrade seamonkey-nspr | Dec 1, 2016 | Jun 30, 2010 |
| Debian | — | Upgrade tuxonice-userui | Jul 30, 2024 | Jun 30, 2010 |
| Freebsd | — | Upgrade linux-firefoxUpgrade pngUpgrade seamonkeyUpgrade linux-firefox-develUpgrade firefoxUpgrade thunderbird | Dec 10, 2025 | Jul 21, 2010 |
| Gentoo Linux | — | Upgrade net-libs/xulrunner.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/firefox.Upgrade net-misc/iputils.Upgrade sys-auth/pam_krb5.Upgrade net-ftp/lftp.Upgrade dev-perl/perl-tk.Upgrade net-mail/mlmmj.Upgrade dev-lang/tk.Upgrade www-client/icecat.Upgrade www-client/mozilla-firefox.Upgrade x11-apps/xinit.Upgrade www-client/uzbl.Upgrade dev-util/sourcenav.Upgrade dev-libs/nss.Upgrade dev-libs/liblzw.Upgrade app-arch/ncompress.Upgrade x11-misc/slim.Upgrade www-client/seamonkey.Upgrade media-libs/libpng.Upgrade app-emulation/emul-linux-x86-baselibs.Upgrade dev-util/insight.Upgrade www-client/seamonkey-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/firefox-bin.Upgrade media-gfx/splashutils.Upgrade sys-apps/pmount.Upgrade app-text/dvipng.Upgrade app-antivirus/bitdefender-console.Upgrade app-misc/beanstalkd.Upgrade x11-libs/gtk+.Upgrade www-client/mozilla-firefox-bin.Upgrade sys-apps/acl.Upgrade kde-base/kget.Upgrade media-tv/dvbstreamer.Upgrade app-text/gv.Upgrade app-arch/gzip.Upgrade sys-devel/m4.Upgrade mail-client/thunderbird.Upgrade sys-block/partimage.Upgrade kde-base/kdm.Upgrade mail-client/thunderbird-bin.Upgrade net-libs/xulrunner-bin. | Oct 30, 2017 | Jun 30, 2010 |
| Mfsa2010 41 | — | Upgrade to Mozilla Firefox version 3.6.7Upgrade to Mozilla Firefox version 3.5.11 | Jun 14, 2012 | Jun 30, 2010 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.0.6 | Feb 3, 2012 | Jun 30, 2010 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 3.1.1Upgrade to Mozilla Thunderbird version 3.0.6 | Feb 22, 2012 | Jun 30, 2010 |
| Oracle_linux | — | Upgrade firefoxUpgrade xulrunner-develUpgrade libpng-develUpgrade xulrunnerUpgrade libpng | Oct 16, 2024 | Jun 30, 2010 |
| Suse | — | Upgrade mozilla-xulrunner192-translationsUpgrade mozilla-nss-x86Upgrade libpng12-develUpgrade libpng16-compat-devel-x86-64-v3Upgrade mozilla-nss-toolsUpgrade mozilla-xulrunner190-gnomevfsUpgrade mozilla-xulrunner190Upgrade mozilla-xulrunner190-translationsUpgrade mozilla-xulrunner190-32bitUpgrade orbit2-32bitUpgrade gconf2Upgrade libpng12-0-x86Upgrade orbit2Upgrade libidlUpgrade libfreshclam3Upgrade MozillaThunderbird-translations-commonUpgrade MozillaFirefox-translations-otherUpgrade libpng12-compat-develUpgrade MozillaFirefoxUpgrade libpng15-15Upgrade MozillaThunderbird-develUpgrade mozilla-xulrunner192-32bitUpgrade mozilla-xulrunner191-32bitUpgrade mozilla-nss-32bitUpgrade mozilla-xulrunner192-gnome-32bitUpgrade libfreebl3-32bitUpgrade mozilla-xulrunner191Upgrade libpng16-16-32bitUpgrade MozillaThunderbird-translations-otherUpgrade libpng12-0-32bitUpgrade mozilla-xulrunner191-gnomevfsUpgrade mozilla-xulrunner191-translationsUpgrade gconf2-x86Upgrade libclammspack0Upgrade libfreebl3-x86Upgrade mozilla-xulrunner192-gnomeUpgrade mozilla-xulrunner190-x86Upgrade mozilla-xulrunner192-translations-32bitUpgrade libfreshclam4Upgrade libfreebl3Upgrade mozilla-xulrunner191-x86Upgrade mozilla-nsprUpgrade libclamav12Upgrade libpng16-develUpgrade gconf2-32bitUpgrade MozillaFirefox-branding-SLEDUpgrade clamav-develUpgrade MozillaFirefox-translations-commonUpgrade libfreshclam2Upgrade clamavUpgrade libpng12-0Upgrade clamav-milterUpgrade mozilla-xulrunner192-x86Upgrade orbit2-x86Upgrade mozilla-nspr-32bitUpgrade libpng16-16Upgrade libpng-develUpgrade clamav-docs-htmlUpgrade MozillaThunderbirdUpgrade mozilla-xulrunner192-develUpgrade libpng16-toolsUpgrade MozillaFirefox-develUpgrade libclamav9Upgrade mozilla-nspr-x86Upgrade libpng-devel-32bitUpgrade mozilla-nssUpgrade libpng16-16-x86-64-v3Upgrade libpng16-devel-x86-64-v3Upgrade libidl-x86Upgrade libpng16-compat-develUpgrade mozilla-xulrunner192Upgrade libidl-32bitUpgrade MozillaFirefox-translations | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade firefoxUpgrade firefox-3.5Upgrade abrowserUpgrade firefox-3.0Upgrade libpng12-0Upgrade thunderbirdUpgrade xulrunner-1.9.2 | Nov 8, 2024 | Jun 30, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub