The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The png_check_keyword function in pngwutil.c in libpng before 1.0.42, and 1.2.x before 1.2.34, might allow context-dependent attackers to set the value of an arbitrary memory location to zero via vectors involving creation of crafted PNG files with keywords, related to an implicit cast of the '\0' character constant to a NULL pointer. NOTE: some sources incorrectly report this as a double free vulnerability.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Gentoo Linux | — | Upgrade sys-devel/m4.Upgrade sys-block/partimage.Upgrade app-text/dvipng.Upgrade x11-misc/slim.Upgrade app-antivirus/bitdefender-console.Upgrade media-gfx/splashutils.Upgrade x11-apps/xinit.Upgrade app-text/gv.Upgrade sys-apps/pmount.Upgrade kde-base/kdm.Upgrade media-tv/dvbstreamer.Upgrade app-arch/gzip.Upgrade kde-base/kget.Upgrade dev-libs/liblzw.Upgrade www-client/uzbl.Upgrade media-libs/libpng.Upgrade dev-lang/tk.Upgrade app-arch/ncompress.Upgrade app-misc/beanstalkd.Upgrade dev-perl/perl-tk.Upgrade dev-util/insight.Upgrade sys-auth/pam_krb5.Upgrade dev-util/sourcenav.Upgrade net-ftp/lftp.Upgrade x11-libs/gtk+.Upgrade net-mail/mlmmj.Upgrade sys-apps/acl.Upgrade net-misc/iputils. | Oct 30, 2017 | Jan 15, 2009 |
| Suse | — | Upgrade libpng12-0-32bitUpgrade libpng12-0-x86Upgrade libpng-develUpgrade libpng-devel-32bitUpgrade libpng12-0 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libpng12-0 | Nov 8, 2024 | Jan 15, 2009 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub