The png_decompress_chunk function in pngrutil.c in libpng 1.0.x before 1.0.53, 1.2.x before 1.2.43, and 1.4.x before 1.4.1 does not properly handle compressed ancillary-chunk data that has a disproportionately large uncompressed representation, which allows remote attackers to cause a denial of service (memory and CPU consumption, and application hang) via a crafted PNG file, as demonstrated by use of the deflate compression method on data composed of many occurrences of the same character, related to a "decompression bomb" attack.
CVSS Details
- CVSS 3.1 Base Score: 4.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx X11 | — | Upgrade macOS to the latest versionApply OS X security update 2010-007 | Dec 16, 2011 | Mar 3, 2010 |
| Centos_linux | — | Upgrade libpng10Upgrade libpng-develUpgrade libpngUpgrade libpng10-devel | Dec 1, 2016 | Mar 3, 2010 |
| Freebsd | — | Upgrade png | Dec 10, 2025 | Apr 20, 2010 |
| Gentoo Linux | — | Upgrade media-libs/libpng. | Oct 30, 2017 | Mar 3, 2010 |
| Oracle_linux | — | Upgrade libpngUpgrade libpng-devel | Oct 16, 2024 | Mar 3, 2010 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 1, 2010 |
| Suse | — | Upgrade libpng12-0-32bitUpgrade libpng12-0Upgrade libpng12-0-x86Upgrade libpng-develUpgrade libpng-devel-32bit | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libpng12-0 | Nov 8, 2024 | Mar 3, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub