Double-free vulnerability in the sPLT chunk structure and png.c in pngcrush before 1.7.87 allows attackers to have unspecified impact via unknown vectors.
CVSS Details
- CVSS 3.0 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade pngcrush | Jul 30, 2024 | Aug 31, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 31, 2017 |
| Suse | — | Upgrade pngcrush-debugsourceUpgrade pngcrushUpgrade pngcrush-debuginfo | Jan 16, 2018 | Feb 9, 2016 |
| Ubuntu | — | Upgrade pngcrush (Ubuntu Pro) | Mar 22, 2023 | Aug 31, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub