https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 20:23:49 +0000 https://cve.radiocsirt.org/vuln/bdu:2015-09413 bdu:2015-09413 https://cve.radiocsirt.org/vuln/bdu:2015-09413 https://cve.radiocsirt.org/vuln/certa-2010-avi-457 certa-2010-avi-457 https://cve.radiocsirt.org/vuln/certa-2010-avi-457 https://cve.radiocsirt.org/vuln/euvd-2026-117435 EUVD-2026-117435 https://cve.radiocsirt.org/vuln/euvd-2026-117435 https://cve.radiocsirt.org/vuln/fkie_cve-2010-0205 <p>The png_decompress_chunk function in pngrutil.c in libpng 1.0.x before 1.0.53, 1.2.x before 1.2.43, and 1.4.x before 1.4.1 does not properly handle compressed ancillary-chunk data that has a disproportionately large uncompressed representation, which allows remote attackers to cause a denial of service (memory and CPU consumption, and application hang) via a crafted PNG file, as demonstrated by use of the deflate compression method on data composed of many occurrences of the same character, related to a &#34;decompression bomb&#34; attack.</p> <p>The png_decompress_chunk function in pngrutil.c in libpng 1.0.x before 1.0.53, 1.2.x before 1.2.43, and 1.4.x before 1.4.1 does not properly handle compressed ancillary-chunk data that has a disproportionately large uncompressed representation, which allows remote attackers to cause a denial of service (memory and CPU consumption, and application hang) via a crafted PNG file, as demonstrated by use of the deflate compression method on data composed of many occurrences of the same character, related to a &#34;decompression bomb&#34; attack.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2010-0205 https://cve.radiocsirt.org/vuln/ghsa-qjvj-64rf-p4qg <p>The png_decompress_chunk function in pngrutil.c in libpng 1.0.x before 1.0.53, 1.2.x before 1.2.43, and 1.4.x before 1.4.1 does not properly handle compressed ancillary-chunk data that has a disproportionately large uncompressed representation, which allows remote attackers to cause a denial of service (memory and CPU consumption, and application hang) via a crafted PNG file, as demonstrated by use of the deflate compression method on data composed of many occurrences of the same character, related to a &#34;decompression bomb&#34; attack.</p> <p>The png_decompress_chunk function in pngrutil.c in libpng 1.0.x before 1.0.53, 1.2.x before 1.2.43, and 1.4.x before 1.4.1 does not properly handle compressed ancillary-chunk data that has a disproportionately large uncompressed representation, which allows remote attackers to cause a denial of service (memory and CPU consumption, and application hang) via a crafted PNG file, as demonstrated by use of the deflate compression method on data composed of many occurrences of the same character, related to a &#34;decompression bomb&#34; attack.</p> https://cve.radiocsirt.org/vuln/ghsa-qjvj-64rf-p4qg https://cve.radiocsirt.org/vuln/gsd-2010-0205 gsd-2010-0205 https://cve.radiocsirt.org/vuln/gsd-2010-0205 https://cve.radiocsirt.org/vuln/rhsa-2010:0534 <p>libpng: Interlaced Images Information Disclosure Vulnerability libpng: excessive memory consumption due to highly compressed huge ancillary chunk libpng: out-of-bounds memory write libpng: Memory leak when processing Physical Scale (sCAL) images</p> <p>libpng: Interlaced Images Information Disclosure Vulnerability libpng: excessive memory consumption due to highly compressed huge ancillary chunk libpng: out-of-bounds memory write libpng: Memory leak when processing Physical Scale (sCAL) images</p> https://cve.radiocsirt.org/vuln/rhsa-2010:0534