Approved changes feed: RSS · Atom
cpe:2.3:a:lodev:lodepng:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Lodev (e5cc08fd-a6c5-5877-8e40-5baa0dc5f499) |
|---|---|
| Product | Lodepng (da2c5c64-eb9f-5fdd-9250-bcd3db84acf6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/lvandeve/lodepng |
purl2cpe | 2026-06-01 10:13:32.250963 |
pkg:nuget/LodePNG |
purl2cpe | 2026-06-01 10:13:32.250967 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-112020 |
vulnerable | 2026-11-03 10:16:28.932754 |
LodePNG through 20261006 Heap Out-of-Bounds Read via getFilterTypesInterlaced()
MEDIUM (6.1)
LodePNG through 20261006 contains a heap out-of-bounds read vulnerability in lodepng::getFilterTypesInterlaced() in lodepng_util.cpp that lacks bounds checks on decompressed IDAT data. Attackers can supply a crafted interlaced PNG declaring a raster larger than its IDAT stream to disclose adjacent heap memory or crash applications.
Published: 2026-10-18T11:38:39.921Z
Updated: 2026-10-22T02:15:36.959Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-17178 |
vulnerable | 2026-06-08 05:13:10.064550 |
Details available
HuffmanTree_makeFromFrequencies in lodepng.c in LodePNG through 2019-09-28, as used in WinPR in FreeRDP and other products, has a memory leak because a supplied realloc pointer (i.e., the first argument to realloc) is also used for a realloc return value.
Published: 2019-10-04T16:57:19.000Z
Updated: 2024-08-05T01:33:17.322Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.