Approved changes feed: RSS · Atom

cpe:2.3:a:greg_roelofs:libpng:1.0.5:*:*:*:*:*:*:*

part: a version: 1.0.5 update: *

VendorGreg Roelofs (aca787fa-66fd-5bc1-852d-193055b3877f)
ProductLibpng (e2612cc1-91f2-50f3-b6cc-9b28de68a9ec)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:bitbucket/qtip/libpng purl2cpe 2026-06-01 10:12:30.385688
pkg:deb/debian/libpng1.6 purl2cpe 2026-06-01 10:12:30.385690
pkg:deb/ubuntu/libpng1.6 purl2cpe 2026-06-01 10:12:30.385692
pkg:github/glennrp/libpng purl2cpe 2026-06-01 10:12:30.385694
pkg:gitlab/redhat/libpng purl2cpe 2026-06-01 10:12:30.385696
pkg:golang/github.com/glennrp/libpng purl2cpe 2026-06-01 10:12:30.385698
pkg:rpm/fedora/libpng purl2cpe 2026-06-01 10:12:30.385700
pkg:rpm/opensuse/libpng16 purl2cpe 2026-06-01 10:12:30.385701
pkg:sourceforge/libpng purl2cpe 2026-06-01 10:12:30.385703

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2002-1363 vulnerable 2026-06-08 04:46:23.534540 Details available
Portable Network Graphics (PNG) library libpng 1.2.5 and earlier does not correctly calculate offsets, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a buffer overflow attack on the row buffers.
Published: 2004-09-01T04:00:00.000Z
Updated: 2024-08-08T03:19:28.584Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.