Most recent entries from all

bdu:2023-07738

Withdrawn: BELL-CVE-2017-12652 — CVE-2017-12652 does not affect BellSoft software

Withdrawn by the publisher.

certfr-2021-avi-589 — De multiples vulnérabilités ont été découvertes dans Juniper Junos Space Log Collector. Certaines d'entre elles permett…

certfr-2021-avi-589

EUVD-2026-243475

fkie_cve-2017-12652

libpng before 1.6.32 does not properly check the length of chunks against the user limit.

GHSA-94xg-qm4r-9r7c

libpng before 1.6.32 does not properly check the length of chunks against the user limit.

gsd-2017-12652

ICSA-23-271-01 — Rockwell Automation PanelView 800

An input/output validation vulnerability exists in a third-party component that the PanelView 800 utilizes. Libpng, which is PNG's reference library, version 1.6.32 and earlier does not properly check the length of chunks against the user limit. Libpng versions prior to 1.6.32 are susceptible to a vulnerability which, when successfully exploited, could potentially lead to a disclosure of sensitive information, addition or modification of data, or a denial-of-service condition.

msrc_CVE-2017-12652 — libpng before 1.6.32 does not properly check the length of chunks against the user limit.

msrc_CVE-2017-12652

OESA-2024-2091 — syslinux security update

Affected: openEuler:24.03-LTS: syslinux, openEuler:22.03-LTS-SP4: syslinux, openEuler:22.03-LTS-SP3: syslinux, openEuler:20.03-LTS-SP4: syslinux, openEuler:22.03-LTS-SP1: syslinux

Security Fix(es):

The png_format_buffer function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 allows remote attackers to cause a denial of service (application crash) via a crafted PNG image that triggers an out-of-bounds read during the copying of error-message data. NOTE: this vulnerability exists because of a CVE-2004-0421 regression. NOTE: this is called an off-by-one error by some sources.(CVE-2011-2501)

Buffer overflow in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4, when used by an application that calls the png_rgb_to_gray function but not the png_set_expand function, allows remote attackers to overwrite memory with an arbitrary amount of data, and possibly have unspecified other impact, via a crafted PNG image.(CVE-2011-2690)

The png_err function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 makes a function call using a NULL pointer argument instead of an empty-string argument, which allows remote attackers to cause a denial of service (application crash) via a crafted PNG image.(CVE-2011-2691)

The png_handle_sCAL function in pngrutil.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 does not properly handle invalid sCAL chunks, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly hav…

openSUSE-SU-2024:10971-1 — libpng12-0-1.2.59-1.9 on GA media

libpng12-0-1.2.59-1.9 on GA media

SUSE-SU-2019:3060-2 — Security update for libpng16

Security update for libpng16

UBUNTU-CVE-2017-12652

Affected: Ubuntu:Pro:14.04:LTS: libpng, Ubuntu:Pro:16.04:LTS: libpng, Ubuntu:Pro:16.04:LTS: libpng1.6

libpng before 1.6.32 does not properly check the length of chunks against the user limit.

WID-SEC-W-2026-0915 — Kyocera Drucker: Mehrere Schwachstellen

Ein Angreifer aus dem lokalen Netzwerk kann mehrere Schwachstellen in verschiedenen Modellen der Kyocera ECOSYS und TASKalfa Produktfamilien ausnutzen, um Dateien zu manipulieren oder einen Denial of Service Zustand herbeizuführen.