Most recent entries from all

bdu:2018-00462

Withdrawn: BELL-CVE-2016-10087 — CVE-2016-10087 does not affect BellSoft software

Withdrawn by the publisher.

BREW-texlive-CVE-2016-10087

Affected: Homebrew: texlive

The png_set_text_2 function in libpng 0.71 before 1.0.67, 1.2.x before 1.2.57, 1.4.x before 1.4.20, 1.5.x before 1.5.28, and 1.6.x before 1.6.27 allows context-dependent attackers to cause a NULL pointer dereference vectors involving loading a text chunk into a png structure, removing the text, and then adding another text chunk to the structure.

cnvd-2017-00242

EUVD-2026-88281

fkie_cve-2016-10087

GHSA-r346-8vrh-m3wr

gsd-2016-10087

msrc_CVE-2016-10087 — The libpng 0.71 allows context-dependent attackers to cause a NULL pointer dereference vectors

msrc_CVE-2016-10087

OESA-2024-2091 — syslinux security update

Affected: openEuler:24.03-LTS: syslinux, openEuler:22.03-LTS-SP4: syslinux, openEuler:22.03-LTS-SP3: syslinux, openEuler:20.03-LTS-SP4: syslinux, openEuler:22.03-LTS-SP1: syslinux

Security Fix(es):

The png_format_buffer function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 allows remote attackers to cause a denial of service (application crash) via a crafted PNG image that triggers an out-of-bounds read during the copying of error-message data. NOTE: this vulnerability exists because of a CVE-2004-0421 regression. NOTE: this is called an off-by-one error by some sources.(CVE-2011-2501)

Buffer overflow in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4, when used by an application that calls the png_rgb_to_gray function but not the png_set_expand function, allows remote attackers to overwrite memory with an arbitrary amount of data, and possibly have unspecified other impact, via a crafted PNG image.(CVE-2011-2690)

The png_err function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 makes a function call using a NULL pointer argument instead of an empty-string argument, which allows remote attackers to cause a denial of service (application crash) via a crafted PNG image.(CVE-2011-2691)

The png_handle_sCAL function in pngrutil.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 does not properly handle invalid sCAL chunks, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly hav…

openSUSE-SU-2024:10971-1 — libpng12-0-1.2.59-1.9 on GA media

libpng12-0-1.2.59-1.9 on GA media

SUSE-SU-2017:0853-1 — Security update for libpng16

Security update for libpng16

UBUNTU-CVE-2016-10087

Affected: Ubuntu:14.04:LTS: libpng, Ubuntu:16.04:LTS: libpng, Ubuntu:Pro:16.04:LTS: libpng1.6

WID-SEC-W-2026-2061 — libpng: Schwachstelle ermöglicht Denial of Service

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in libpng ausnutzen, um einen Denial of Service Angriff durchzuführen.