Approved changes feed: RSS · Atom

cpe:2.3:a:greg_roelofs:libpng:1.5.4:*:*:*:*:*:*:*

part: a version: 1.5.4 update: *

VendorGreg Roelofs (aca787fa-66fd-5bc1-852d-193055b3877f)
ProductLibpng (e2612cc1-91f2-50f3-b6cc-9b28de68a9ec)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:bitbucket/qtip/libpng purl2cpe 2026-06-01 10:12:30.440847
pkg:deb/debian/libpng1.6 purl2cpe 2026-06-01 10:12:30.440849
pkg:deb/ubuntu/libpng1.6 purl2cpe 2026-06-01 10:12:30.440851
pkg:github/glennrp/libpng purl2cpe 2026-06-01 10:12:30.440853
pkg:gitlab/redhat/libpng purl2cpe 2026-06-01 10:12:30.440855
pkg:golang/github.com/glennrp/libpng purl2cpe 2026-06-01 10:12:30.440856
pkg:rpm/fedora/libpng purl2cpe 2026-06-01 10:12:30.440858
pkg:rpm/opensuse/libpng16 purl2cpe 2026-06-01 10:12:30.440860
pkg:sourceforge/libpng purl2cpe 2026-06-01 10:12:30.440862

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-3328 vulnerable 2026-06-08 04:59:24.659689 Details available
The png_handle_cHRM function in pngrutil.c in libpng 1.5.4, when color-correction support is enabled, allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a malformed PNG image containing a cHRM chunk associated with a certain zero value.
Published: 2012-01-17T19:00:00.000Z
Updated: 2024-08-06T23:29:56.726Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.