Approved changes feed: RSS · Atom

cpe:2.3:a:greg_roelofs:libpng:1.0.11:*:*:*:*:*:*:*

part: a version: 1.0.11 update: *

VendorGreg Roelofs (aca787fa-66fd-5bc1-852d-193055b3877f)
ProductLibpng (e2612cc1-91f2-50f3-b6cc-9b28de68a9ec)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:bitbucket/qtip/libpng purl2cpe 2026-06-01 10:12:30.374332
pkg:deb/debian/libpng1.6 purl2cpe 2026-06-01 10:12:30.374334
pkg:deb/ubuntu/libpng1.6 purl2cpe 2026-06-01 10:12:30.374336
pkg:github/glennrp/libpng purl2cpe 2026-06-01 10:12:30.374338
pkg:gitlab/redhat/libpng purl2cpe 2026-06-01 10:12:30.374340
pkg:golang/github.com/glennrp/libpng purl2cpe 2026-06-01 10:12:30.374342
pkg:rpm/fedora/libpng purl2cpe 2026-06-01 10:12:30.374344
pkg:rpm/opensuse/libpng16 purl2cpe 2026-06-01 10:12:30.374346
pkg:sourceforge/libpng purl2cpe 2026-06-01 10:12:30.374348

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2002-1363 vulnerable 2026-06-08 04:46:23.537941 Details available
Portable Network Graphics (PNG) library libpng 1.2.5 and earlier does not correctly calculate offsets, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a buffer overflow attack on the row buffers.
Published: 2004-09-01T04:00:00.000Z
Updated: 2024-08-08T03:19:28.584Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.