libpng before 1.6.32 does not properly check the length of chunks against the user limit.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade libpngUpgrade libpng-develUpgrade libpng-debuginfoUpgrade libpng-static | Oct 28, 2020 | Jul 10, 2019 |
| Centos_linux | — | Upgrade libpng-staticUpgrade libpngUpgrade libpng-develUpgrade libpng-debuginfo | Oct 1, 2020 | Jul 10, 2019 |
| Debian | — | Upgrade libpng1.6 | Jul 30, 2024 | Jul 10, 2019 |
| Huawei Euleros 2_0_sp10 | — | Upgrade syslinuxUpgrade syslinux-nonlinux | Nov 11, 2024 | Jul 10, 2019 |
| Huawei Euleros 2_0_sp11 | — | Upgrade syslinux-nonlinuxUpgrade syslinux | Dec 12, 2024 | Jul 10, 2019 |
| Huawei Euleros 2_0_sp12 | — | Upgrade syslinuxUpgrade syslinux-nonlinux | Dec 12, 2024 | Jul 10, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libpngUpgrade libpng-devel | Sep 12, 2019 | Jul 10, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libpngUpgrade libpng-devel | Sep 25, 2019 | Jul 10, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libpngUpgrade libpng-devel | Sep 12, 2019 | Jul 10, 2019 |
| Huawei Euleros 2_0_sp9 | — | Upgrade syslinuxUpgrade syslinux-nonlinux | Nov 11, 2024 | Jul 10, 2019 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 19, 2022 |
| Oracle Solaris | — | Upgrade image/library/libpng to version 1.4.22-0.175.3.36.0.17.0 on Solaris 11.3Upgrade image/library/libpng10 to version 1.0.69-11.4.14.0.1.1.0 on Solaris 11.4Upgrade image/library/libpng14 to version 1.4.22-11.4.14.0.1.1.0 on Solaris 11.4Upgrade image/library/libpng12 to version 1.2.59-11.4.14.0.1.1.0 on Solaris 11.4 | Oct 16, 2019 | Jul 10, 2019 |
| Oracle_linux | — | Upgrade libpng-staticUpgrade libpngUpgrade libpng-devel | Oct 10, 2020 | Jul 10, 2019 |
| Redhat_linux | — | Upgrade libpng-debuginfoUpgrade libpngUpgrade libpng-staticUpgrade libpng-develNo solution exists | Oct 1, 2020 | Jul 10, 2019 |
| Suse | — | Upgrade libpng16-compat-develUpgrade libpng12-develUpgrade libpng16-develUpgrade libpng12-compat-develUpgrade libpng12-0-32bitUpgrade libpng16-16Upgrade libpng12-0Upgrade libpng16-16-32bit | May 20, 2018 | May 20, 2018 |
| Ubuntu | — | Upgrade libpng16-dev (Ubuntu Pro)Upgrade libpng12-0 (Ubuntu Pro)Upgrade libpng12-dev (Ubuntu Pro)Upgrade libpng3 (Ubuntu Pro)Upgrade libpng16-16 (Ubuntu Pro) | May 24, 2022 | May 20, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 10, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub