png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-libpngalpine-linux-upgrade-firefox-esralpine-linux-upgrade-openjdk8alpine-linux-upgrade-openjdk11 | May 7, 2019 | Feb 4, 2019 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-java-11-amazon-correttoamazon-linux-ami-2-upgrade-java-11-amazon-corretto-headlessamazon-linux-ami-2-upgrade-java-11-amazon-corretto-javadocamazon-linux-ami-2-upgrade-thunderbirdamazon-linux-ami-2-upgrade-thunderbird-debuginfo | Apr 27, 2020 | Feb 4, 2019 | |
| Arch Linux | View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗ | arch-linux-upgrade-latest | Jul 11, 2025 | Feb 4, 2019 |
| Centos_linux | — | centos-upgrade-firefoxcentos-upgrade-firefox-debuginfocentos-upgrade-firefox-debugsourcecentos-upgrade-java-1-7-1-ibmcentos-upgrade-java-1-7-1-ibm-democentos-upgrade-java-1-7-1-ibm-develcentos-upgrade-java-1-7-1-ibm-jdbccentos-upgrade-java-1-7-1-ibm-plugincentos-upgrade-java-1-7-1-ibm-srccentos-upgrade-java-1-8-0-ibmcentos-upgrade-java-1-8-0-ibm-democentos-upgrade-java-1-8-0-ibm-develcentos-upgrade-java-1-8-0-ibm-headlesscentos-upgrade-java-1-8-0-ibm-jdbccentos-upgrade-java-1-8-0-ibm-plugincentos-upgrade-java-1-8-0-ibm-srccentos-upgrade-java-1-8-0-ibm-webstartcentos-upgrade-satellitecentos-upgrade-satellite-brandingcentos-upgrade-thunderbirdcentos-upgrade-thunderbird-debuginfocentos-upgrade-thunderbird-debugsource | May 31, 2019 | Feb 4, 2019 |
| Debian | debian-upgrade-firefox-esrdebian-upgrade-libpng1-6debian-upgrade-thunderbird | Apr 29, 2019 | Feb 4, 2019 | |
| Freebsd | freebsd-upgrade-package-firefoxfreebsd-upgrade-package-waterfoxfreebsd-upgrade-package-seamonkeyfreebsd-upgrade-package-linux-seamonkeyfreebsd-upgrade-package-firefox-esrfreebsd-upgrade-package-linux-firefoxfreebsd-upgrade-package-libxulfreebsd-upgrade-package-thunderbirdfreebsd-upgrade-package-linux-thunderbird | May 23, 2019 | May 22, 2019 | |
| Gentoo Linux | gentoo-linux-upgrade-media-libs-libpng | Aug 6, 2019 | Feb 4, 2019 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-libpnghuawei-euleros-2_0_sp8-upgrade-libpng-devel | Jul 26, 2019 | Feb 4, 2019 | |
| Ibm Aix | ibm-aix-java_july2019_advisory | Oct 11, 2019 | Feb 4, 2019 | |
| Ibm Java | — | ibm-java-upgrade-7_0_10_50ibm-java-upgrade-7_1_4_50ibm-java-upgrade-8_0_5_40 | Aug 7, 2019 | Feb 4, 2019 |
| Jre Vuln | jre-upgrade-latest | Aug 1, 2019 | Feb 4, 2019 | |
| Mfsa2019 13 | mozilla-firefox-upgrade-67_0 | May 22, 2019 | Feb 4, 2019 | |
| Mfsa2019 14 | mozilla-firefox-esr-upgrade-60_7 | May 22, 2019 | Feb 4, 2019 | |
| Mozilla Thunderbird | mozilla-thunderbird-upgrade-60_7 | May 23, 2019 | Feb 4, 2019 | |
| Oracle Mysql | mysql-upgrade-1_6_37 | Apr 27, 2022 | Feb 4, 2019 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-codec-libtheora-1-1-1-11-4-30-0-1-88-0oracle-solaris-11-4-upgrade-desktop-pdf-viewer-gsx-9-53-3-11-4-30-0-1-88-0oracle-solaris-11-4-upgrade-desktop-pdf-viewer-poppler-viewer-20-10-0-11-4-30-0-1-88-0oracle-solaris-11-4-upgrade-editor-gnu-emacs-26-3-11-4-30-0-1-88-0oracle-solaris-11-4-upgrade-editor-gnu-emacs-gnu-emacs-gtk-26-3-11-4-30-0-1-88-0oracle-solaris-11-4-upgrade-editor-gnu-emacs-gnu-emacs-lisp-26-3-11-4-30-0-1-88-0oracle-solaris-11-4-upgrade-editor-gnu-emacs-gnu-emacs-no-x11-26-3-11-4-30-0-1-88-0oracle-solaris-11-4-upgrade-editor-gnu-emacs-gnu-emacs-x11-26-3-11-4-30-0-1-88-0oracle-solaris-11-4-upgrade-image-ghostscript-9-53-3-11-4-30-0-1-88-0oracle-solaris-11-4-upgrade-image-gnuplot-5-2-2-11-4-30-0-1-88-0oracle-solaris-11-4-upgrade-image-imagemagick-6-9-10-91-11-4-30-0-1-88-0oracle-solaris-11-4-upgrade-image-library-libpng16-1-6-37-11-4-30-0-1-88-0oracle-solaris-11-4-upgrade-image-library-libwebp-1-1-0-11-4-30-0-1-88-0oracle-solaris-11-4-upgrade-image-library-openjpeg2-2-3-1-11-4-30-0-1-88-0oracle-solaris-11-4-upgrade-image-rrdtool-1-7-0-11-4-30-0-0-88-0oracle-solaris-11-4-upgrade-image-xcursorgen-1-0-7-11-4-30-0-1-88-0oracle-solaris-11-4-upgrade-library-desktop-gdk-pixbuf-2-39-2-11-4-30-0-1-88-0oracle-solaris-11-4-upgrade-library-desktop-gstreamer-1-gst-plugins-base-1-16-2-11-4-30-0-1-88-0oracle-solaris-11-4-upgrade-library-desktop-gstreamer-1-gst-plugins-good-1-16-2-11-4-30-0-1-88-0oracle-solaris-11-4-upgrade-library-desktop-libgxps-0-3-1-11-4-30-0-1-88-0oracle-solaris-11-4-upgrade-library-desktop-qt5-5-12-9-11-4-30-0-1-88-0oracle-solaris-11-4-upgrade-library-desktop-search-tracker-2-3-2-11-4-30-0-1-88-0oracle-solaris-11-4-upgrade-library-desktop-webkitgtk4-2-30-3-11-4-30-0-1-88-0oracle-solaris-11-4-upgrade-library-gd-2-2-5-11-4-30-0-1-88-0oracle-solaris-11-4-upgrade-library-graphics-pixman-0-38-4-11-4-30-0-1-88-0oracle-solaris-11-4-upgrade-library-graphics-wxwidgets-3-0-3-11-4-30-0-1-88-0oracle-solaris-11-4-upgrade-mail-thunderbird-60-7-0-11-4-10-0-1-2-0oracle-solaris-11-4-upgrade-mail-thunderbird-plugin-thunderbird-lightning-60-7-0-11-4-10-0-1-2-0oracle-solaris-11-4-upgrade-print-filter-poppler-20-10-0-11-4-30-0-1-88-0oracle-solaris-11-4-upgrade-system-library-freetype-2-2-10-4-11-4-30-0-1-88-0oracle-solaris-11-4-upgrade-web-analytics-webalizer-2-23-8-11-4-30-0-1-88-0oracle-solaris-11-4-upgrade-web-browser-firefox-60-7-0-11-4-10-0-1-2-0oracle-solaris-11-4-upgrade-web-data-firefox-bookmarks-60-7-0-11-4-10-0-1-2-0oracle-solaris-11-4-upgrade-web-php-73-7-3-23-11-4-30-0-1-88-0oracle-solaris-11-4-upgrade-web-php-74-7-4-11-11-4-30-0-1-88-0oracle-solaris-11-4-upgrade-x11-library-toolkit-fltk-1-3-5-11-4-30-0-1-88-0 | Jun 26, 2019 | Feb 4, 2019 | |
| Oracle_linux | — | oracle-linux-upgrade-firefoxoracle-linux-upgrade-thunderbird | May 24, 2019 | Jan 25, 2019 |
| Redhat_linux | redhat-upgrade-firefoxredhat-upgrade-firefox-debuginforedhat-upgrade-firefox-debugsourceredhat-upgrade-java-1-7-1-ibmredhat-upgrade-java-1-7-1-ibm-demoredhat-upgrade-java-1-7-1-ibm-develredhat-upgrade-java-1-7-1-ibm-jdbcredhat-upgrade-java-1-7-1-ibm-pluginredhat-upgrade-java-1-7-1-ibm-srcredhat-upgrade-java-1-8-0-ibmredhat-upgrade-java-1-8-0-ibm-demoredhat-upgrade-java-1-8-0-ibm-develredhat-upgrade-java-1-8-0-ibm-headlessredhat-upgrade-java-1-8-0-ibm-jdbcredhat-upgrade-java-1-8-0-ibm-pluginredhat-upgrade-java-1-8-0-ibm-srcredhat-upgrade-java-1-8-0-ibm-webstartredhat-upgrade-thunderbirdredhat-upgrade-thunderbird-debuginforedhat-upgrade-thunderbird-debugsource | May 24, 2019 | Feb 4, 2019 | |
| Suse | — | suse-upgrade-java-11-openjdksuse-upgrade-java-11-openjdk-accessibilitysuse-upgrade-java-11-openjdk-demosuse-upgrade-java-11-openjdk-develsuse-upgrade-java-11-openjdk-headlesssuse-upgrade-java-11-openjdk-javadocsuse-upgrade-java-11-openjdk-jmodssuse-upgrade-java-11-openjdk-srcsuse-upgrade-java-1_7_0-openjdksuse-upgrade-java-1_7_0-openjdk-demosuse-upgrade-java-1_7_0-openjdk-develsuse-upgrade-java-1_7_0-openjdk-headlesssuse-upgrade-java-1_7_1-ibmsuse-upgrade-java-1_7_1-ibm-alsasuse-upgrade-java-1_7_1-ibm-develsuse-upgrade-java-1_7_1-ibm-jdbcsuse-upgrade-java-1_7_1-ibm-pluginsuse-upgrade-java-1_8_0-ibmsuse-upgrade-java-1_8_0-ibm-alsasuse-upgrade-java-1_8_0-ibm-develsuse-upgrade-java-1_8_0-ibm-pluginsuse-upgrade-java-1_8_0-openjdksuse-upgrade-java-1_8_0-openjdk-accessibilitysuse-upgrade-java-1_8_0-openjdk-demosuse-upgrade-java-1_8_0-openjdk-develsuse-upgrade-java-1_8_0-openjdk-headlesssuse-upgrade-java-1_8_0-openjdk-javadocsuse-upgrade-java-1_8_0-openjdk-srcsuse-upgrade-libpng16-16suse-upgrade-libpng16-16-32bitsuse-upgrade-libpng16-compat-develsuse-upgrade-libpng16-compat-devel-32bitsuse-upgrade-libpng16-develsuse-upgrade-libpng16-devel-32bitsuse-upgrade-libpng16-toolssuse-upgrade-mozillafirefoxsuse-upgrade-mozillafirefox-branding-upstreamsuse-upgrade-mozillafirefox-buildsymbolssuse-upgrade-mozillafirefox-develsuse-upgrade-mozillafirefox-translations-commonsuse-upgrade-mozillafirefox-translations-othersuse-upgrade-mozillathunderbirdsuse-upgrade-mozillathunderbird-buildsymbolssuse-upgrade-mozillathunderbird-translations-commonsuse-upgrade-mozillathunderbird-translations-other | May 31, 2019 | Feb 4, 2019 |
| Ubuntu | ubuntu-upgrade-firefoxubuntu-upgrade-libpng16-16ubuntu-upgrade-openjdk-11-jdkubuntu-upgrade-openjdk-11-jdk-headlessubuntu-upgrade-openjdk-11-jreubuntu-upgrade-openjdk-11-jre-headlessubuntu-upgrade-openjdk-11-jre-zeroubuntu-upgrade-openjdk-8-jdkubuntu-upgrade-openjdk-8-jdk-headlessubuntu-upgrade-openjdk-8-jreubuntu-upgrade-openjdk-8-jre-headlessubuntu-upgrade-openjdk-8-jre-jamvmubuntu-upgrade-openjdk-8-jre-zeroubuntu-upgrade-thunderbird | May 4, 2019 | Feb 4, 2019 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Feb 4, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub