png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libpngUpgrade firefox-esrUpgrade openjdk8Upgrade openjdk11 | May 7, 2019 | Feb 4, 2019 |
| Amazon Linux Ami 2 | — | Upgrade thunderbirdUpgrade java-11-amazon-corretto-headlessUpgrade java-11-amazon-corretto-javadocUpgrade thunderbird-debuginfoUpgrade java-11-amazon-corretto | Apr 27, 2020 | Feb 4, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Feb 4, 2019 |
| Azul Zulu | — | Upgrade to Azul Zulu JDK 8 installer 8.39 (JDK 8u221-b08, quarterly CPU) (LTS stream)Apply legacy security update: Azul Zulu JDK 7 installer 7.30 (JDK 7u231-b5, quarterly CPU) — Azul Legacy Production SupportApply Azul Zulu JDK 12 installer 12.3 (JDK 12.0.2+3, PSU) (short-term support); migrate to JDK 17 (LTS)Upgrade to Azul Zulu JDK 11 installer 11.32 (JDK 11.0.3.0.101+11, quarterly CPU) (LTS stream) | Feb 4, 2019 | Feb 4, 2019 |
| Centos_linux | — | Upgrade java-1.8.0-ibm-demoUpgrade java-1.7.1-ibm-pluginUpgrade satelliteUpgrade java-1.8.0-ibm-develUpgrade java-1.7.1-ibmUpgrade thunderbird-debugsourceUpgrade thunderbirdUpgrade firefoxUpgrade java-1.8.0-ibm-jdbcUpgrade firefox-debuginfoUpgrade firefox-debugsourceUpgrade java-1.8.0-ibm-pluginUpgrade java-1.7.1-ibm-develUpgrade thunderbird-debuginfoUpgrade java-1.8.0-ibmUpgrade java-1.8.0-ibm-headlessUpgrade java-1.7.1-ibm-srcUpgrade java-1.8.0-ibm-srcUpgrade satellite-brandingUpgrade java-1.8.0-ibm-webstartUpgrade java-1.7.1-ibm-demoUpgrade java-1.7.1-ibm-jdbc | May 31, 2019 | Feb 4, 2019 |
| Debian | — | Upgrade firefox-esrUpgrade libpng1.6Upgrade thunderbird | Apr 29, 2019 | Feb 4, 2019 |
| Freebsd | — | Upgrade waterfoxUpgrade linux-firefoxUpgrade seamonkeyUpgrade firefox-esrUpgrade firefoxUpgrade linux-seamonkeyUpgrade thunderbirdUpgrade linux-thunderbirdUpgrade libxul | May 23, 2019 | May 22, 2019 |
| Gentoo Linux | — | Upgrade media-libs/libpng. | Aug 6, 2019 | Feb 4, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libpng-develUpgrade libpng | Jul 26, 2019 | Feb 4, 2019 |
| Ibm Aix | — | Apply the fix or workaround for java_july2019_advisory | Oct 11, 2019 | Feb 4, 2019 |
| Ibm Java | — | Upgrade IBM Java to version 7.0.10.50Upgrade IBM Java to version 8.0.5.40Upgrade IBM Java to version 7.1.4.50 | Aug 7, 2019 | Feb 4, 2019 |
| Jre Vuln | — | Upgrade to the latest version of Oracle Java | Aug 1, 2019 | Feb 4, 2019 |
| Mfsa2019 13 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 67.0 | May 22, 2019 | Feb 4, 2019 |
| Mfsa2019 14 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox ESR version 60.7 | May 22, 2019 | Feb 4, 2019 |
| Mozilla Thunderbird | — | Upgrade to the latest version of Mozilla ThunderbirdUpgrade to Mozilla Thunderbird version 60.7 | May 23, 2019 | Feb 4, 2019 |
| Oracle Mysql | — | Upgrade to Oracle MySQL version 1.6.37 | Apr 27, 2022 | Feb 4, 2019 |
| Oracle Solaris | — | Upgrade web/php-73 to version 7.3.23-11.4.30.0.1.88.0 on Solaris 11.4Upgrade editor/gnu-emacs to version 26.3-11.4.30.0.1.88.0 on Solaris 11.4Upgrade mail/thunderbird/plugin/thunderbird-lightning to version 60.7.0-11.4.10.0.1.2.0 on Solaris 11.4Upgrade library/desktop/search/tracker to version 2.3.2-11.4.30.0.1.88.0 on Solaris 11.4Upgrade library/graphics/pixman to version 0.38.4-11.4.30.0.1.88.0 on Solaris 11.4Upgrade x11/library/toolkit/fltk to version 1.3.5-11.4.30.0.1.88.0 on Solaris 11.4Upgrade web/browser/firefox to version 60.7.0-11.4.10.0.1.2.0 on Solaris 11.4Upgrade library/graphics/wxwidgets to version 3.0.3-11.4.30.0.1.88.0 on Solaris 11.4Upgrade library/desktop/gdk-pixbuf to version 2.39.2-11.4.30.0.1.88.0 on Solaris 11.4Upgrade library/desktop/webkitgtk4 to version 2.30.3-11.4.30.0.1.88.0 on Solaris 11.4Upgrade web/php-74 to version 7.4.11-11.4.30.0.1.88.0 on Solaris 11.4Upgrade system/library/freetype-2 to version 2.10.4-11.4.30.0.1.88.0 on Solaris 11.4Upgrade image/gnuplot to version 5.2.2-11.4.30.0.1.88.0 on Solaris 11.4Upgrade image/xcursorgen to version 1.0.7-11.4.30.0.1.88.0 on Solaris 11.4Upgrade editor/gnu-emacs/gnu-emacs-x11 to version 26.3-11.4.30.0.1.88.0 on Solaris 11.4Upgrade image/rrdtool to version 1.7.0-11.4.30.0.0.88.0 on Solaris 11.4Upgrade library/gd to version 2.2.5-11.4.30.0.1.88.0 on Solaris 11.4Upgrade codec/libtheora to version 1.1.1-11.4.30.0.1.88.0 on Solaris 11.4Upgrade image/library/openjpeg2 to version 2.3.1-11.4.30.0.1.88.0 on Solaris 11.4Upgrade library/desktop/gstreamer-1/gst-plugins-good to version 1.16.2-11.4.30.0.1.88.0 on Solaris 11.4Upgrade library/desktop/libgxps to version 0.3.1-11.4.30.0.1.88.0 on Solaris 11.4Upgrade web/analytics/webalizer to version 2.23.8-11.4.30.0.1.88.0 on Solaris 11.4Upgrade editor/gnu-emacs/gnu-emacs-lisp to version 26.3-11.4.30.0.1.88.0 on Solaris 11.4Upgrade image/library/libpng16 to version 1.6.37-11.4.30.0.1.88.0 on Solaris 11.4Upgrade desktop/pdf-viewer/poppler-viewer to version 20.10.0-11.4.30.0.1.88.0 on Solaris 11.4Upgrade desktop/pdf-viewer/gsx to version 9.53.3-11.4.30.0.1.88.0 on Solaris 11.4Upgrade image/ghostscript to version 9.53.3-11.4.30.0.1.88.0 on Solaris 11.4Upgrade print/filter/poppler to version 20.10.0-11.4.30.0.1.88.0 on Solaris 11.4Upgrade library/desktop/gstreamer-1/gst-plugins-base to version 1.16.2-11.4.30.0.1.88.0 on Solaris 11.4Upgrade editor/gnu-emacs/gnu-emacs-gtk to version 26.3-11.4.30.0.1.88.0 on Solaris 11.4Upgrade image/library/libwebp to version 1.1.0-11.4.30.0.1.88.0 on Solaris 11.4Upgrade image/imagemagick to version 6.9.10.91-11.4.30.0.1.88.0 on Solaris 11.4Upgrade mail/thunderbird to version 60.7.0-11.4.10.0.1.2.0 on Solaris 11.4Upgrade library/desktop/qt5 to version 5.12.9-11.4.30.0.1.88.0 on Solaris 11.4Upgrade editor/gnu-emacs/gnu-emacs-no-x11 to version 26.3-11.4.30.0.1.88.0 on Solaris 11.4Upgrade web/data/firefox-bookmarks to version 60.7.0-11.4.10.0.1.2.0 on Solaris 11.4 | Jun 26, 2019 | Feb 4, 2019 |
| Oracle_linux | — | Upgrade thunderbirdUpgrade firefox | May 24, 2019 | Jan 25, 2019 |
| Redhat_linux | — | Upgrade firefox-debugsourceUpgrade firefox-debuginfoUpgrade java-1.7.1-ibm-jdbcUpgrade java-1.7.1-ibm-demoUpgrade thunderbird-debugsourceUpgrade java-1.7.1-ibm-pluginUpgrade java-1.8.0-ibm-develUpgrade java-1.8.0-ibmUpgrade java-1.7.1-ibm-srcUpgrade java-1.8.0-ibm-jdbcUpgrade java-1.8.0-ibm-headlessUpgrade java-1.7.1-ibm-develUpgrade java-1.8.0-ibm-pluginUpgrade java-1.8.0-ibm-webstartUpgrade thunderbirdUpgrade java-1.8.0-ibm-demoUpgrade firefoxNo solution existsUpgrade java-1.7.1-ibmUpgrade thunderbird-debuginfoUpgrade java-1.8.0-ibm-src | May 24, 2019 | Feb 4, 2019 |
| Suse | — | Upgrade java-1_8_0-openjdk-headlessUpgrade java-1_7_1-ibm-alsaUpgrade java-11-openjdk-jmodsUpgrade libpng16-devel-32bitUpgrade MozillaFirefox-develUpgrade java-1_7_0-openjdkUpgrade libpng16-compat-devel-32bitUpgrade java-1_8_0-ibm-alsaUpgrade java-11-openjdk-srcUpgrade java-1_8_0-ibm-develUpgrade MozillaThunderbird-buildsymbolsUpgrade java-1_7_0-openjdk-demoUpgrade java-1_7_1-ibm-pluginUpgrade java-1_7_1-ibmUpgrade libpng16-compat-develUpgrade java-1_7_0-openjdk-headlessUpgrade java-11-openjdk-headlessUpgrade java-1_7_0-openjdk-develUpgrade java-1_7_1-ibm-develUpgrade java-1_8_0-ibmUpgrade libpng16-16Upgrade java-1_8_0-openjdkUpgrade MozillaFirefox-translations-commonUpgrade java-1_8_0-ibm-pluginUpgrade java-1_7_1-ibm-jdbcUpgrade MozillaThunderbird-translations-commonUpgrade java-11-openjdk-accessibilityUpgrade java-11-openjdkUpgrade mozillafirefox-buildsymbolsUpgrade java-1_8_0-openjdk-srcUpgrade libpng16-toolsUpgrade libpng16-develUpgrade java-11-openjdk-demoUpgrade MozillaThunderbird-translations-otherUpgrade java-11-openjdk-javadocUpgrade libpng16-16-32bitUpgrade java-1_8_0-openjdk-javadocUpgrade MozillaFirefox-translations-otherUpgrade java-1_8_0-openjdk-accessibilityUpgrade MozillaThunderbirdUpgrade java-1_8_0-openjdk-demoUpgrade MozillaFirefoxUpgrade java-1_8_0-openjdk-develUpgrade mozillafirefox-branding-upstreamUpgrade java-11-openjdk-devel | May 31, 2019 | Feb 4, 2019 |
| Ubuntu | — | Upgrade libpng12-0 (Ubuntu Pro)Upgrade openjdk-8-jdkUpgrade firefoxUpgrade thunderbirdUpgrade openjdk-11-jreUpgrade openjdk-8-jreUpgrade libpng16-dev (Ubuntu Pro)Upgrade openjdk-11-jdkUpgrade openjdk-8-jre-jamvmUpgrade openjdk-8-jre-headlessUpgrade libpng16-16Upgrade libpng12-dev (Ubuntu Pro)Upgrade openjdk-8-jre-zeroUpgrade libpng3 (Ubuntu Pro)Upgrade libpng16-16 (Ubuntu Pro)Upgrade libpng16-devtools (Ubuntu Pro)Upgrade openjdk-11-jre-zeroUpgrade openjdk-11-jre-headlessUpgrade openjdk-8-jdk-headlessUpgrade openjdk-11-jdk-headlessUpgrade libpng16-tools (Ubuntu Pro) | May 4, 2019 | Feb 4, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 4, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub