libpng before 1.6.32 does not properly check the length of chunks against the user limit.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade libpng-develUpgrade libpngUpgrade libpng-staticUpgrade libpng-debuginfo | Oct 28, 2020 | Jul 10, 2019 |
| Centos_linux | — | Upgrade libpng-staticUpgrade libpngUpgrade libpng-develUpgrade libpng-debuginfo | Oct 1, 2020 | Jul 10, 2019 |
| Debian | — | Upgrade libpng1.6 | Jul 30, 2024 | Jul 10, 2019 |
| Huawei Euleros 2_0_sp10 | — | Upgrade syslinuxUpgrade syslinux-nonlinux | Nov 11, 2024 | Jul 10, 2019 |
| Huawei Euleros 2_0_sp11 | — | Upgrade syslinux-nonlinuxUpgrade syslinux | Dec 12, 2024 | Jul 10, 2019 |
| Huawei Euleros 2_0_sp12 | — | Upgrade syslinuxUpgrade syslinux-nonlinux | Dec 12, 2024 | Jul 10, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libpng-develUpgrade libpng | Sep 12, 2019 | Jul 10, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libpngUpgrade libpng-devel | Sep 25, 2019 | Jul 10, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libpng-develUpgrade libpng | Sep 12, 2019 | Jul 10, 2019 |
| Huawei Euleros 2_0_sp9 | — | Upgrade syslinuxUpgrade syslinux-nonlinux | Nov 11, 2024 | Jul 10, 2019 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 19, 2022 |
| Oracle Solaris | — | Upgrade image/library/libpng12 to version 1.2.59-11.4.14.0.1.1.0 on Solaris 11.4Upgrade image/library/libpng14 to version 1.4.22-11.4.14.0.1.1.0 on Solaris 11.4Upgrade image/library/libpng10 to version 1.0.69-11.4.14.0.1.1.0 on Solaris 11.4Upgrade image/library/libpng to version 1.4.22-0.175.3.36.0.17.0 on Solaris 11.3 | Oct 16, 2019 | Jul 10, 2019 |
| Oracle_linux | — | Upgrade libpngUpgrade libpng-staticUpgrade libpng-devel | Oct 10, 2020 | Jul 10, 2019 |
| Redhat_linux | — | Upgrade libpng-debuginfoUpgrade libpng-develUpgrade libpng-staticUpgrade libpngNo solution exists | Oct 1, 2020 | Jul 10, 2019 |
| Suse | — | Upgrade libpng12-0-32bitUpgrade libpng16-16-32bitUpgrade libpng16-16Upgrade libpng16-develUpgrade libpng12-0Upgrade libpng12-compat-develUpgrade libpng12-develUpgrade libpng16-compat-devel | May 20, 2018 | May 20, 2018 |
| Ubuntu | — | Upgrade libpng16-dev (Ubuntu Pro)Upgrade libpng12-0 (Ubuntu Pro)Upgrade libpng12-dev (Ubuntu Pro)Upgrade libpng16-16 (Ubuntu Pro)Upgrade libpng3 (Ubuntu Pro) | May 24, 2022 | May 20, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 10, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub