The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Off-by-one error in ICC profile chunk handling in the png_set_iCCP function in pngset.c in libpng before 1.0.29 beta1 and 1.2.x before 1.2.21 beta1 allows remote attackers to cause a denial of service (crash) via a crafted PNG image that prevents a name field from being NULL terminated.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Imageio | — | Apply OS X security update 2008-003Upgrade macOS to the latest version | Dec 16, 2011 | Oct 8, 2007 |
| Apple Osx X11 | — | Apply OS X security update 2008-002 | Dec 16, 2011 | Oct 8, 2007 |
| Freebsd | — | Upgrade png | Dec 10, 2025 | Oct 11, 2007 |
| Gentoo Linux | — | Upgrade media-libs/libpng.Upgrade app-emulation/emul-linux-x86-baselibs. | Oct 30, 2017 | Oct 8, 2007 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub