Integer underflow in the png_check_keyword function in pngwutil.c in libpng 0.90 through 0.99, 1.0.x before 1.0.66, 1.1.x and 1.2.x before 1.2.56, 1.3.x and 1.4.x before 1.4.19, and 1.5.x before 1.5.26 allows remote attackers to have unspecified impact via a space character as a keyword in a PNG image, which triggers an out-of-bounds read.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Aix 5.3 Java_jan2016_advisory | — | — | Aug 5, 2016 | Apr 14, 2016 |
| Aix 6.1 Java_jan2016_advisory | — | — | Aug 5, 2016 | Apr 14, 2016 |
| Aix 7.1 Java_jan2016_advisory | — | — | Aug 5, 2016 | Apr 14, 2016 |
| Aix 7.2 Java_jan2016_advisory | — | — | Aug 5, 2016 | Apr 14, 2016 |
| Amazon Linux Ami 2 | — | Upgrade libpngUpgrade libpng-debuginfoUpgrade libpng-develUpgrade libpng-static | Jan 24, 2023 | Apr 14, 2016 |
| Debian | — | Upgrade libpng | Feb 2, 2016 | Jan 13, 2016 |
| Gentoo Linux | — | Upgrade media-libs/libpng. | Oct 30, 2017 | Apr 14, 2016 |
| Huawei Euleros 2_0_sp10 | — | Upgrade syslinuxUpgrade syslinux-nonlinux | Nov 11, 2024 | Apr 14, 2016 |
| Huawei Euleros 2_0_sp11 | — | Upgrade syslinux-nonlinuxUpgrade syslinux | Dec 12, 2024 | Apr 14, 2016 |
| Huawei Euleros 2_0_sp12 | — | Upgrade syslinuxUpgrade syslinux-nonlinux | Dec 12, 2024 | Apr 14, 2016 |
| Huawei Euleros 2_0_sp9 | — | Upgrade syslinuxUpgrade syslinux-nonlinux | Nov 11, 2024 | Apr 14, 2016 |
| Ibm Aix | — | Apply the fix or workaround for java_jan2016_advisory | Nov 30, 2017 | Apr 14, 2016 |
| Ibm Java | — | Upgrade IBM Java to version 6.1.8.20Upgrade IBM Java to version 7.0.9.30Upgrade IBM Java to version 7.1.3.30Upgrade IBM Java to version 6.0.16.20 | Oct 5, 2018 | Apr 14, 2016 |
| Oracle Solaris | — | Upgrade image/library/libpng to version 1.4.19-0.175.3.10.0.1.0 on Solaris 11.3 | May 29, 2017 | Apr 14, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 10, 2015 |
| Suse | — | Upgrade libpng12-0-x86Upgrade java-1_7_0-ibm-alsaUpgrade libpng12-develUpgrade java-1_6_0-ibm-jdbcUpgrade java-1_7_1-ibm-jdbcUpgrade java-1_6_0-ibm-develUpgrade java-1_6_0-ibmUpgrade java-1_6_0-ibm-fontsUpgrade libpng12-0-32bitUpgrade java-1_7_0-ibm-jdbcUpgrade java-1_7_1-ibm-pluginUpgrade libpng15-15Upgrade libpng12-compat-develUpgrade java-1_7_1-ibm-develUpgrade java-1_7_0-ibm-develUpgrade java-1_6_0-ibm-pluginUpgrade libpng-devel-32bitUpgrade java-1_7_0-ibmUpgrade libpng-develUpgrade java-1_7_0-ibm-pluginUpgrade java-1_6_0-ibm-alsaUpgrade java-1_7_1-ibmUpgrade java-1_7_1-ibm-alsaUpgrade libpng12-0 | Feb 10, 2016 | Feb 10, 2016 |
| Ubuntu | — | Upgrade libpng12-0 | Feb 2, 2016 | Jan 6, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub