Rapid7’s 2026 Global Cybersecurity Summit is now available on-demand.Watch sessions.
Rapid7

vulnerability

IBM Java: CVE-2019-7317 : Oracle July 16 2019 CPU

Severity
3
CVSS
(AV:N/AC:H/Au:N/C:N/I:N/A:P)
Published
Feb 4, 2019
Added
Aug 7, 2019
Modified
Jul 9, 2026

Description

png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.

Solutions

ibm-java-upgrade-7_0_10_50ibm-java-upgrade-7_1_4_50ibm-java-upgrade-8_0_5_40

References

    Title
    Rapid7 Labs

    2026 Global Threat Landscape Report

    The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.