Approved changes feed: RSS · Atom

cpe:2.3:a:greg_roelofs:libpng:1.0.14:*:*:*:*:*:*:*

part: a version: 1.0.14 update: *

VendorGreg Roelofs (aca787fa-66fd-5bc1-852d-193055b3877f)
ProductLibpng (e2612cc1-91f2-50f3-b6cc-9b28de68a9ec)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:bitbucket/qtip/libpng purl2cpe 2026-06-01 10:12:30.382383
pkg:deb/debian/libpng1.6 purl2cpe 2026-06-01 10:12:30.382385
pkg:deb/ubuntu/libpng1.6 purl2cpe 2026-06-01 10:12:30.382387
pkg:github/glennrp/libpng purl2cpe 2026-06-01 10:12:30.382389
pkg:gitlab/redhat/libpng purl2cpe 2026-06-01 10:12:30.382391
pkg:golang/github.com/glennrp/libpng purl2cpe 2026-06-01 10:12:30.382393
pkg:rpm/fedora/libpng purl2cpe 2026-06-01 10:12:30.382394
pkg:rpm/opensuse/libpng16 purl2cpe 2026-06-01 10:12:30.382396
pkg:sourceforge/libpng purl2cpe 2026-06-01 10:12:30.382398

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2002-1363 vulnerable 2026-06-08 04:46:23.538756 Details available
Portable Network Graphics (PNG) library libpng 1.2.5 and earlier does not correctly calculate offsets, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a buffer overflow attack on the row buffers.
Published: 2004-09-01T04:00:00.000Z
Updated: 2024-08-08T03:19:28.584Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-0728 vulnerable 2026-06-08 04:46:22.101744 Details available
Buffer overflow in the progressive reader for libpng 1.2.x before 1.2.4, and 1.0.x before 1.0.14, allows attackers to cause a denial of service (crash) via a PNG data stream that has more IDAT data than indicated by the IHDR chunk.
Published: 2002-07-26T04:00:00.000Z
Updated: 2024-08-08T02:56:38.915Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.