The Portable Network Graphics library (libpng) 1.0.15 and earlier allows attackers to cause a denial of service (crash) via a malformed PNG image file that triggers an error that causes an out-of-bounds read when creating the error message.

Threat-Mapped Scoring

Score: 1.5

Priority: P4 - Informational (Low)

• S10 – Denial of Service

EPSS

Score: 0.02457
Percentile: 0.84567

CVSS Scoring

Mapped CWE(s)

• CWE-125 : Out-of-bounds Read

All CAPEC(s)

CAPEC(s) with Mapped TTPs

Mapped ATT&CK TTPs

Affected Products

• cpe:2.3:a:libpng:libpng:1.0.0:*:*:*:*:*:*:*
• cpe:2.3:a:libpng:libpng:1.0.5:*:*:*:*:*:*:*
• cpe:2.3:a:libpng:libpng:1.0.6:*:*:*:*:*:*:*
• cpe:2.3:a:libpng:libpng:1.0.7:*:*:*:*:*:*:*
• cpe:2.3:a:libpng:libpng:1.0.8:*:*:*:*:*:*:*
• cpe:2.3:a:libpng:libpng:1.0.9:*:*:*:*:*:*:*
• cpe:2.3:a:libpng:libpng:1.0.10:*:*:*:*:*:*:*
• cpe:2.3:a:libpng:libpng:1.0.11:*:*:*:*:*:*:*
• cpe:2.3:a:libpng:libpng:1.0.12:*:*:*:*:*:*:*
• cpe:2.3:a:libpng:libpng:1.0.13:*:*:*:*:*:*:*
• cpe:2.3:a:libpng:libpng:1.0.14:*:*:*:*:*:*:*
• cpe:2.3:a:libpng:libpng:1.2.0:*:*:*:*:*:*:*
• cpe:2.3:a:libpng:libpng:1.2.1:*:*:*:*:*:*:*
• cpe:2.3:a:libpng:libpng:1.2.2:*:*:*:*:*:*:*
• cpe:2.3:a:libpng:libpng:1.2.3:*:*:*:*:*:*:*
• cpe:2.3:a:libpng:libpng:1.2.4:*:*:*:*:*:*:*
• cpe:2.3:a:libpng:libpng:1.2.5:*:*:*:*:*:*:*
• cpe:2.3:a:openpkg:openpkg:1.3:*:*:*:*:*:*:*
• cpe:2.3:a:openpkg:openpkg:2.0:*:*:*:*:*:*:*
• cpe:2.3:a:redhat:libpng:1.2.2-16:*:*:*:*:*:*:*
• cpe:2.3:a:redhat:libpng:1.2.2-20:*:*:*:*:*:*:*
• cpe:2.3:o:redhat:enterprise_linux:2.1:*:*:*:*:*:*:*
• cpe:2.3:o:redhat:enterprise_linux:3.0:*:*:*:*:*:*:*
• cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*
• cpe:2.3:o:trustix:secure_linux:2.0:*:*:*:*:*:*:*
• cpe:2.3:o:trustix:secure_linux:2.1:*:*:*:*:*:*:*

← Back to Home