Integer underflow in the png_check_keyword function in pngwutil.c in libpng 0.90 through 0.99, 1.0.x before 1.0.66, 1.1.x and 1.2.x before 1.2.56, 1.3.x and 1.4.x before 1.4.19, and 1.5.x before 1.5.26 allows remote attackers to have unspecified impact via a space character as a keyword in a PNG image, which triggers an out-of-bounds read.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Aix 5.3 Java_jan2016_advisory | — | — | Aug 5, 2016 | Apr 14, 2016 |
| Aix 6.1 Java_jan2016_advisory | — | — | Aug 5, 2016 | Apr 14, 2016 |
| Aix 7.1 Java_jan2016_advisory | — | — | Aug 5, 2016 | Apr 14, 2016 |
| Aix 7.2 Java_jan2016_advisory | — | — | Aug 5, 2016 | Apr 14, 2016 |
| Amazon Linux Ami 2 | — | Upgrade libpng-staticUpgrade libpng-debuginfoUpgrade libpngUpgrade libpng-devel | Jan 24, 2023 | Apr 14, 2016 |
| Debian | — | Upgrade libpng | Feb 2, 2016 | Jan 13, 2016 |
| Gentoo Linux | — | Upgrade media-libs/libpng. | Oct 30, 2017 | Apr 14, 2016 |
| Huawei Euleros 2_0_sp10 | — | Upgrade syslinux-nonlinuxUpgrade syslinux | Nov 11, 2024 | Apr 14, 2016 |
| Huawei Euleros 2_0_sp11 | — | Upgrade syslinuxUpgrade syslinux-nonlinux | Dec 12, 2024 | Apr 14, 2016 |
| Huawei Euleros 2_0_sp12 | — | Upgrade syslinux-nonlinuxUpgrade syslinux | Dec 12, 2024 | Apr 14, 2016 |
| Huawei Euleros 2_0_sp9 | — | Upgrade syslinux-nonlinuxUpgrade syslinux | Nov 11, 2024 | Apr 14, 2016 |
| Ibm Aix | — | Apply the fix or workaround for java_jan2016_advisory | Nov 30, 2017 | Apr 14, 2016 |
| Ibm Java | — | Upgrade IBM Java to version 7.1.3.30Upgrade IBM Java to version 7.0.9.30Upgrade IBM Java to version 6.0.16.20Upgrade IBM Java to version 6.1.8.20 | Oct 5, 2018 | Apr 14, 2016 |
| Oracle Solaris | — | Upgrade image/library/libpng to version 1.4.19-0.175.3.10.0.1.0 on Solaris 11.3 | May 29, 2017 | Apr 14, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 10, 2015 |
| Suse | — | Upgrade java-1_7_1-ibm-pluginUpgrade libpng-devel-32bitUpgrade libpng12-compat-develUpgrade java-1_7_0-ibm-develUpgrade java-1_7_0-ibm-pluginUpgrade java-1_7_1-ibmUpgrade libpng15-15Upgrade java-1_7_1-ibm-alsaUpgrade java-1_7_0-ibmUpgrade java-1_6_0-ibm-alsaUpgrade libpng12-0Upgrade java-1_6_0-ibm-pluginUpgrade java-1_7_1-ibm-develUpgrade libpng-develUpgrade java-1_6_0-ibm-jdbcUpgrade java-1_6_0-ibmUpgrade libpng12-0-x86Upgrade java-1_7_0-ibm-jdbcUpgrade libpng12-develUpgrade java-1_7_0-ibm-alsaUpgrade libpng12-0-32bitUpgrade java-1_6_0-ibm-develUpgrade java-1_7_1-ibm-jdbcUpgrade java-1_6_0-ibm-fonts | Feb 10, 2016 | Feb 10, 2016 |
| Ubuntu | — | Upgrade libpng12-0 | Feb 2, 2016 | Jan 6, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub