Approved changes feed: RSS · Atom

cpe:2.3:a:libpng:libpng:1.6.12:beta:*:*:*:*:*:*

part: a version: 1.6.12 update: beta

VendorLibpng (b87086c8-9966-53f7-b270-df72ee4b8d73)
ProductLibpng (8c2111f0-4992-59d8-8db9-d4f954eb189a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/glennrp/libpng purl2cpe 2026-06-01 10:15:49.493114
pkg:sourceforge/libpng purl2cpe 2026-06-01 10:15:49.493116

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-0973 vulnerable 2026-06-08 05:06:24.421598 Details available
Buffer overflow in the png_read_IDAT_data function in pngrutil.c in libpng before 1.5.21 and 1.6.x before 1.6.16 allows context-dependent attackers to execute arbitrary code via IDAT data with a large width, a different vulnerability than CVE-2014-9495.
Published: 2015-01-18T18:00:00.000Z
Updated: 2025-06-09T15:25:54.990Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9495 vulnerable 2026-06-08 05:06:11.964616 Details available
Heap-based buffer overflow in the png_combine_row function in libpng before 1.5.21 and 1.6.x before 1.6.16, when running on 64-bit systems, might allow context-dependent attackers to execute arbitrary code via a "very wide interlaced" PNG image.
Published: 2015-01-10T19:00:00.000Z
Updated: 2025-06-09T15:16:20.021Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.