The png_set_text_2 function in libpng 0.71 before 1.0.67, 1.2.x before 1.2.57, 1.4.x before 1.4.20, 1.5.x before 1.5.28, and 1.6.x before 1.6.27 allows context-dependent attackers to cause a NULL pointer dereference vectors involving loading a text chunk into a png structure, removing the text, and then adding another text chunk to the structure.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 30, 2017 |
| Debian | — | Upgrade libpng1.6 | Jul 30, 2024 | Jan 30, 2017 |
| Gentoo Linux | — | Upgrade media-libs/libpng. | Oct 30, 2017 | Jan 30, 2017 |
| Huawei Euleros 2_0_sp10 | — | Upgrade syslinuxUpgrade syslinux-nonlinux | Nov 11, 2024 | Jan 30, 2017 |
| Huawei Euleros 2_0_sp11 | — | Upgrade syslinux-nonlinuxUpgrade syslinux | Dec 12, 2024 | Jan 30, 2017 |
| Huawei Euleros 2_0_sp12 | — | Upgrade syslinux-nonlinuxUpgrade syslinux | Dec 12, 2024 | Jan 30, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libpng-develUpgrade libpng | Apr 2, 2019 | Jan 30, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libpngUpgrade libpng-devel | May 1, 2019 | Jan 30, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libpngUpgrade libpng-devel | Aug 16, 2019 | Jan 30, 2017 |
| Huawei Euleros 2_0_sp9 | — | Upgrade syslinux-nonlinuxUpgrade syslinux | Nov 11, 2024 | Jan 30, 2017 |
| Oracle Solaris | — | Upgrade image/library/libpng to version 1.4.20-0.175.3.22.0.1.0 on Solaris 11.3 | Jul 19, 2017 | Jan 30, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 29, 2016 |
| Suse | — | Upgrade libpng12-develUpgrade libpng16-compat-develUpgrade libpng-devel-32bitUpgrade libpng12-0Upgrade libpng12-0-x86Upgrade libpng12-0-32bitUpgrade libpng16-develUpgrade libpng15-15Upgrade libpng-develUpgrade libpng16-16-32bitUpgrade libpng16-16Upgrade libpng12-compat-devel | Mar 30, 2017 | Jan 30, 2017 |
| Ubuntu | — | Upgrade libpng3 (Ubuntu Pro)Upgrade libpng16-tools (Ubuntu Pro)Upgrade libpng12-0Upgrade libpng16-16 (Ubuntu Pro)Upgrade libpng12-0 (Ubuntu Pro)Upgrade libpng16-dev (Ubuntu Pro)Upgrade libpng16-devtools (Ubuntu Pro)Upgrade libpng12-dev (Ubuntu Pro) | Jul 24, 2018 | Jan 30, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub