Vulnerabilities > Libpng
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2022-08-24 | CVE-2021-4214 | Classic Buffer Overflow vulnerability in multiple products A heap overflow flaw was found in libpngs' pngimage.c program. | 5.5 |
| 2022-08-23 | CVE-2020-35511 | Buffer Over-read vulnerability in multiple products A global buffer overflow was discovered in pngcheck function in pngcheck-2.4.0(5 patches applied) via a crafted png file. | 7.8 |
| 2020-12-08 | CVE-2020-27818 | Out-of-bounds Read vulnerability in multiple products A flaw was found in the check_chunk_name() function of pngcheck-2.4.0. | 3.3 |
| 2019-07-10 | CVE-2017-12652 | Improper Input Validation vulnerability in multiple products libpng before 1.6.32 does not properly check the length of chunks against the user limit. | 9.8 |
| 2019-07-10 | CVE-2018-14550 | Out-of-bounds Write vulnerability in multiple products An issue has been found in third-party PNM decoding associated with libpng 1.6.35. | 8.8 |
| 2019-02-04 | CVE-2019-7317 | Use After Free vulnerability in multiple products png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute. | 5.3 |
| 2019-01-11 | CVE-2019-6129 | Memory Leak vulnerability in Libpng 1.6.36 png_create_info_struct in png.c in libpng 1.6.36 has a memory leak, as demonstrated by pngcp. | 6.5 |
| 2018-07-13 | CVE-2018-14048 | An issue has been found in libpng 1.6.34. | 4.3 |
| 2018-07-09 | CVE-2018-13785 | Integer Overflow or Wraparound vulnerability in multiple products In libpng 1.6.34, a wrong calculation of row_factor in the png_check_chunk_length function (pngrutil.c) may trigger an integer overflow and resultant divide-by-zero while processing a crafted PNG file, leading to a denial of service. | 4.3 |
| 2017-01-30 | CVE-2016-10087 | NULL Pointer Dereference vulnerability in Libpng The png_set_text_2 function in libpng 0.71 before 1.0.67, 1.2.x before 1.2.57, 1.4.x before 1.4.20, 1.5.x before 1.5.28, and 1.6.x before 1.6.27 allows context-dependent attackers to cause a NULL pointer dereference vectors involving loading a text chunk into a png structure, removing the text, and then adding another text chunk to the structure. | 7.5 |