Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote attackers to execute arbitrary code via a PNG image that triggers an additional data row.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Itunes | — | Upgrade Apple iTunes to the latest version | Jun 25, 2026 | Jan 5, 2024 |
| Apple Osx Imageio | — | Apply OS X security update 2010-007Upgrade macOS to the latest version | Dec 16, 2011 | Jun 30, 2010 |
| Apple Osx Php | — | Apply OS X security update 2010-005 | Dec 16, 2011 | Jun 30, 2010 |
| Apple Osx X11 | — | Apply OS X security update 2010-007Upgrade macOS to the latest version | Dec 16, 2011 | Jun 30, 2010 |
| Apple Safari | — | Uninstall Apple Safari on WindowsUpgrade to Apple Safari version 5.0.4 | Jan 5, 2012 | Jun 30, 2010 |
| Centos_linux | — | Upgrade libpng10Upgrade seamonkey-nss-develUpgrade seamonkey-nsprUpgrade seamonkey-chatUpgrade seamonkey-dom-inspectorUpgrade libpng10-develUpgrade xulrunner-develUpgrade libpngUpgrade seamonkey-develUpgrade seamonkey-nspr-develUpgrade seamonkey-js-debuggerUpgrade thunderbirdUpgrade seamonkey-nssUpgrade seamonkeyUpgrade xulrunnerUpgrade firefoxUpgrade seamonkey-mailUpgrade libpng-devel | Dec 1, 2016 | Jun 30, 2010 |
| Debian | — | Upgrade tuxonice-userui | Jul 30, 2024 | Jun 30, 2010 |
| Freebsd | — | Upgrade pngUpgrade linux-firefoxUpgrade firefoxUpgrade linux-firefox-develUpgrade thunderbirdUpgrade seamonkey | Dec 10, 2025 | Jul 21, 2010 |
| Gentoo Linux | — | Upgrade net-libs/xulrunner-bin.Upgrade kde-base/kdm.Upgrade sys-block/partimage.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade x11-libs/gtk+.Upgrade www-client/firefox-bin.Upgrade app-misc/beanstalkd.Upgrade sys-apps/pmount.Upgrade sys-devel/m4.Upgrade sys-apps/acl.Upgrade app-arch/gzip.Upgrade app-text/dvipng.Upgrade app-antivirus/bitdefender-console.Upgrade media-tv/dvbstreamer.Upgrade mail-client/thunderbird.Upgrade app-text/gv.Upgrade kde-base/kget.Upgrade www-client/mozilla-firefox-bin.Upgrade media-gfx/splashutils.Upgrade mail-client/thunderbird-bin.Upgrade net-libs/xulrunner.Upgrade dev-util/sourcenav.Upgrade x11-misc/slim.Upgrade www-client/firefox.Upgrade sys-auth/pam_krb5.Upgrade net-misc/iputils.Upgrade app-emulation/emul-linux-x86-baselibs.Upgrade www-client/uzbl.Upgrade net-mail/mlmmj.Upgrade www-client/mozilla-firefox.Upgrade x11-apps/xinit.Upgrade www-client/icecat.Upgrade dev-lang/tk.Upgrade mail-client/mozilla-thunderbird.Upgrade dev-perl/perl-tk.Upgrade www-client/seamonkey.Upgrade net-ftp/lftp.Upgrade dev-libs/liblzw.Upgrade dev-util/insight.Upgrade www-client/seamonkey-bin.Upgrade media-libs/libpng.Upgrade app-arch/ncompress.Upgrade dev-libs/nss. | Oct 30, 2017 | Jun 30, 2010 |
| Mfsa2010 41 | — | Upgrade to Mozilla Firefox version 3.6.7Upgrade to Mozilla Firefox version 3.5.11 | Jun 14, 2012 | Jun 30, 2010 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.0.6 | Feb 3, 2012 | Jun 30, 2010 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 3.1.1Upgrade to Mozilla Thunderbird version 3.0.6 | Feb 22, 2012 | Jun 30, 2010 |
| Oracle_linux | — | Upgrade libpngUpgrade libpng-develUpgrade xulrunnerUpgrade xulrunner-develUpgrade firefox | Oct 16, 2024 | Jun 30, 2010 |
| Suse | — | Upgrade mozilla-xulrunner192-develUpgrade mozillafirefox-branding-upstreamUpgrade mozillafirefox-translations-commonUpgrade mozilla-xulrunner192Upgrade libpng-develUpgrade seamonkey-dom-inspectorUpgrade mozilla-xulrunner192-translations-otherUpgrade mozilla-xulrunner191-translations-commonUpgrade mozilla-xulrunner192-buildsymbolsUpgrade sap-aio-releaseUpgrade mozilla-xulrunner191-gnomevfs-32bitUpgrade libpng-devel-32bitUpgrade libpng12-0-x86Upgrade mozilla-xulrunner191Upgrade mozillathunderbirdUpgrade mozillafirefox-translations-otherUpgrade mozilla-xulrunner191-develUpgrade mozillafirefoxUpgrade mozilla-js192Upgrade mozilla-xulrunner192-gnomeUpgrade libpng-x86Upgrade libpng-64bitUpgrade python-xpcom191Upgrade libpng3Upgrade enigmailUpgrade mozilla-xulrunner192-translations-common-32bitUpgrade seamonkey-ircUpgrade seamonkey-translations-commonUpgrade mozillathunderbird-translations-commonUpgrade mozilla-xulrunner191-32bitUpgrade seamonkey-translations-otherUpgrade seamonkeyUpgrade libpng12-0-32bitUpgrade mozilla-xulrunner191-gnomevfsUpgrade mozilla-js192-32bitUpgrade mozilla-xulrunner191-translationsUpgrade mozilla-xulrunner192-gnome-32bitUpgrade mozilla-xulrunner192-translations-other-32bitUpgrade MozillaThunderbird-develUpgrade mozilla-xulrunner191-translations-otherUpgrade libpng12-0-64bitUpgrade libpng-devel-64bitUpgrade mozilla-xulrunner192-32bitUpgrade mozilla-xulrunner191-translations-32bitUpgrade MozillaFirefox-translationsUpgrade seamonkey-venkmanUpgrade libpngUpgrade mozillathunderbird-translations-otherUpgrade mozilla-xulrunner192-translations-commonUpgrade libpng-32bitUpgrade libpng12-0 | Feb 17, 2015 | Jun 30, 2010 |
| Ubuntu | — | Upgrade firefox-3.5Upgrade libpng12-0Upgrade firefoxUpgrade abrowserUpgrade firefox-3.0Upgrade thunderbirdUpgrade xulrunner-1.9.2 | Nov 8, 2024 | Jun 30, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub