An issue has been found in third-party PNM decoding associated with libpng 1.6.35. It is a stack-based buffer overflow in the function get_token in pnm2png.c in pnm2png.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libpng | Aug 22, 2024 | Jul 10, 2019 |
| Debian | — | Upgrade libpng1.6 | Jul 30, 2024 | Jul 10, 2019 |
| Gentoo Linux | — | Upgrade media-libs/libpng. | Aug 6, 2019 | Jul 10, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libpng-develUpgrade libpng | Jan 3, 2020 | Jul 10, 2019 |
| Oracle Solaris | — | Upgrade library/desktop/webkitgtk4 to version 2.30.3-11.4.30.0.1.88.0 on Solaris 11.4Upgrade image/ghostscript to version 9.53.3-11.4.30.0.1.88.0 on Solaris 11.4Upgrade library/desktop/gstreamer-1/gst-plugins-base to version 1.16.2-11.4.30.0.1.88.0 on Solaris 11.4Upgrade image/xcursorgen to version 1.0.7-11.4.30.0.1.88.0 on Solaris 11.4Upgrade system/library/freetype-2 to version 2.10.4-11.4.30.0.1.88.0 on Solaris 11.4Upgrade editor/gnu-emacs/gnu-emacs-lisp to version 26.3-11.4.30.0.1.88.0 on Solaris 11.4Upgrade image/library/libwebp to version 1.1.0-11.4.30.0.1.88.0 on Solaris 11.4Upgrade image/gnuplot to version 5.2.2-11.4.30.0.1.88.0 on Solaris 11.4Upgrade library/desktop/libgxps to version 0.3.1-11.4.30.0.1.88.0 on Solaris 11.4Upgrade web/php-74 to version 7.4.11-11.4.30.0.1.88.0 on Solaris 11.4Upgrade library/desktop/gstreamer-1/gst-plugins-good to version 1.16.2-11.4.30.0.1.88.0 on Solaris 11.4Upgrade web/php-73 to version 7.3.23-11.4.30.0.1.88.0 on Solaris 11.4Upgrade library/graphics/wxwidgets to version 3.0.3-11.4.30.0.1.88.0 on Solaris 11.4Upgrade editor/gnu-emacs/gnu-emacs-gtk to version 26.3-11.4.30.0.1.88.0 on Solaris 11.4Upgrade print/filter/poppler to version 20.10.0-11.4.30.0.1.88.0 on Solaris 11.4Upgrade desktop/pdf-viewer/gsx to version 9.53.3-11.4.30.0.1.88.0 on Solaris 11.4Upgrade codec/libtheora to version 1.1.1-11.4.30.0.1.88.0 on Solaris 11.4Upgrade library/gd to version 2.2.5-11.4.30.0.1.88.0 on Solaris 11.4Upgrade image/library/libpng16 to version 1.6.37-11.4.30.0.1.88.0 on Solaris 11.4Upgrade library/graphics/pixman to version 0.38.4-11.4.30.0.1.88.0 on Solaris 11.4Upgrade web/analytics/webalizer to version 2.23.8-11.4.30.0.1.88.0 on Solaris 11.4Upgrade editor/gnu-emacs to version 26.3-11.4.30.0.1.88.0 on Solaris 11.4Upgrade image/imagemagick to version 6.9.10.91-11.4.30.0.1.88.0 on Solaris 11.4Upgrade image/library/openjpeg2 to version 2.3.1-11.4.30.0.1.88.0 on Solaris 11.4Upgrade desktop/pdf-viewer/poppler-viewer to version 20.10.0-11.4.30.0.1.88.0 on Solaris 11.4Upgrade image/rrdtool to version 1.7.0-11.4.30.0.0.88.0 on Solaris 11.4Upgrade editor/gnu-emacs/gnu-emacs-x11 to version 26.3-11.4.30.0.1.88.0 on Solaris 11.4Upgrade library/desktop/search/tracker to version 2.3.2-11.4.30.0.1.88.0 on Solaris 11.4Upgrade library/desktop/gdk-pixbuf to version 2.39.2-11.4.30.0.1.88.0 on Solaris 11.4Upgrade library/desktop/qt5 to version 5.12.9-11.4.30.0.1.88.0 on Solaris 11.4Upgrade editor/gnu-emacs/gnu-emacs-no-x11 to version 26.3-11.4.30.0.1.88.0 on Solaris 11.4Upgrade x11/library/toolkit/fltk to version 1.3.5-11.4.30.0.1.88.0 on Solaris 11.4 | Feb 17, 2021 | Jul 10, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 10, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub