The png_set_text_2 function in libpng 0.71 before 1.0.67, 1.2.x before 1.2.57, 1.4.x before 1.4.20, 1.5.x before 1.5.28, and 1.6.x before 1.6.27 allows context-dependent attackers to cause a NULL pointer dereference vectors involving loading a text chunk into a png structure, removing the text, and then adding another text chunk to the structure.
CVSS Details
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 30, 2017 |
| Debian | — | Upgrade libpng1.6 | Jul 30, 2024 | Jan 30, 2017 |
| Gentoo Linux | — | Upgrade media-libs/libpng. | Oct 30, 2017 | Jan 30, 2017 |
| Huawei Euleros 2_0_sp10 | — | Upgrade syslinux-nonlinuxUpgrade syslinux | Nov 11, 2024 | Jan 30, 2017 |
| Huawei Euleros 2_0_sp11 | — | Upgrade syslinuxUpgrade syslinux-nonlinux | Dec 12, 2024 | Jan 30, 2017 |
| Huawei Euleros 2_0_sp12 | — | Upgrade syslinuxUpgrade syslinux-nonlinux | Dec 12, 2024 | Jan 30, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libpngUpgrade libpng-devel | Apr 2, 2019 | Jan 30, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libpng-develUpgrade libpng | May 1, 2019 | Jan 30, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libpng-develUpgrade libpng | Aug 16, 2019 | Jan 30, 2017 |
| Huawei Euleros 2_0_sp9 | — | Upgrade syslinuxUpgrade syslinux-nonlinux | Nov 11, 2024 | Jan 30, 2017 |
| Oracle Solaris | — | Upgrade image/library/libpng to version 1.4.20-0.175.3.22.0.1.0 on Solaris 11.3 | Jul 19, 2017 | Jan 30, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 29, 2016 |
| Suse | — | Upgrade libpng-devel-32bitUpgrade libpng12-develUpgrade libpng16-compat-develUpgrade libpng16-16-32bitUpgrade libpng16-develUpgrade libpng12-0-x86Upgrade libpng12-0-32bitUpgrade libpng-develUpgrade libpng15-15Upgrade libpng12-0Upgrade libpng16-16Upgrade libpng12-compat-devel | Mar 30, 2017 | Jan 30, 2017 |
| Ubuntu | — | Upgrade libpng12-0 (Ubuntu Pro)Upgrade libpng12-0Upgrade libpng16-tools (Ubuntu Pro)Upgrade libpng3 (Ubuntu Pro)Upgrade libpng16-16 (Ubuntu Pro)Upgrade libpng12-dev (Ubuntu Pro)Upgrade libpng16-dev (Ubuntu Pro)Upgrade libpng16-devtools (Ubuntu Pro) | Jul 24, 2018 | Jan 30, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub