Approved changes feed: RSS · Atom

cpe:2.3:a:greg_roelofs:libpng:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorGreg Roelofs (aca787fa-66fd-5bc1-852d-193055b3877f)
ProductLibpng (e2612cc1-91f2-50f3-b6cc-9b28de68a9ec)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:bitbucket/qtip/libpng purl2cpe 2026-06-01 10:12:30.364592
pkg:deb/debian/libpng1.6 purl2cpe 2026-06-01 10:12:30.364595
pkg:deb/ubuntu/libpng1.6 purl2cpe 2026-06-01 10:12:30.364597
pkg:github/glennrp/libpng purl2cpe 2026-06-01 10:12:30.364599
pkg:gitlab/redhat/libpng purl2cpe 2026-06-01 10:12:30.364600
pkg:golang/github.com/glennrp/libpng purl2cpe 2026-06-01 10:12:30.364602
pkg:rpm/fedora/libpng purl2cpe 2026-06-01 10:12:30.364604
pkg:rpm/opensuse/libpng16 purl2cpe 2026-06-01 10:12:30.364606
pkg:sourceforge/libpng purl2cpe 2026-06-01 10:12:30.364607

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-3334 vulnerable 2026-06-08 04:49:08.931564 Details available
Buffer overflow in the png_decompress_chunk function in pngrutil.c in libpng before 1.2.12 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via unspecified vectors related to "chunk error processing," possibly involving the "chunk_name".
Published: 2006-06-30T23:00:00.000Z
Updated: 2024-08-07T18:23:21.185Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0599 vulnerable 2026-06-08 04:47:50.503924 Details available
Multiple integer overflows in the (1) png_read_png in pngread.c or (2) png_handle_sPLT functions in pngrutil.c or (3) progressive display image reading capability in libpng 1.2.5 and earlier allow remote attackers to cause a denial of service (application crash) via a malformed PNG image.
Published: 2004-08-05T04:00:00.000Z
Updated: 2024-08-08T00:24:26.315Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0598 vulnerable 2026-06-08 04:47:50.503202 Details available
The png_handle_iCCP function in libpng 1.2.5 and earlier allows remote attackers to cause a denial of service (application crash) via a certain PNG image that triggers a null dereference.
Published: 2004-08-05T04:00:00.000Z
Updated: 2024-08-08T00:24:26.881Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0597 vulnerable 2026-06-08 04:47:50.499762 Details available
Multiple buffer overflows in libpng 1.2.5 and earlier, as used in multiple products, allow remote attackers to execute arbitrary code via malformed PNG images in which (1) the png_handle_tRNS function does not properly validate the length of transparency chunk (tRNS) data, or the (2) png_handle_sBIT or (3) png_handle_hIST functions do not perform sufficient bounds checking.
Published: 2004-08-05T04:00:00.000Z
Updated: 2024-08-08T00:24:26.488Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.