Lucene search

K
osvGoogleOSV:DLA-343-1
HistoryNov 17, 2015 - 12:00 a.m.

libpng - security update

2015-11-1700:00:00
Google
osv.dev
7

0.039 Low

EPSS

Percentile

92.0%

  • CVE-2015-7981
    Added a safety check in png_set_tIME() (Bug report from Qixue Xiao).
  • CVE-2015-8126
    Multiple buffer overflows in the (1) png_set_PLTE and
    (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x and 1.2.x
    before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x before 1.5.24,
    and 1.6.x before 1.6.19 allow remote attackers to cause a denial
    of service (application crash) or possibly have unspecified other
    impact via a small bit-depth value in an IHDR (aka image header)
    chunk in a PNG image.
  • CVE-2012-3425
    vulnerable code is not present here