GCVE - cpe:2.3:a:libpng:libpng:1.0.11:beta2:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:libpng:libpng:1.0.11:beta2:*:*:*:*:*:*

part: a version: 1.0.11 update: beta2

Vendor	Libpng (`b87086c8-9966-53f7-b270-df72ee4b8d73`)
Product	Libpng (`8c2111f0-4992-59d8-8db9-d4f954eb189a`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/glennrp/libpng`	purl2cpe	2026-06-01 10:15:48.911410
`pkg:sourceforge/libpng`	purl2cpe	2026-06-01 10:15:48.911412

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2009-2042`	vulnerable	2026-06-08 04:51:26.195615	Details available libpng before 1.2.37 does not properly parse 1-bit interlaced images with width values that are not divisible by 8, which causes libpng to include uninitialized bits in certain rows of a PNG file and might allow remote attackers to read portions of sensitive memory via "out-of-bounds pixels" in the file. Published: 2009-06-12T20:07:00.000Z Updated: 2024-08-07T05:36:20.484Z Open on db.gcve.eu Reference links http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.551809 http://www.vupen.com/english/advisories/2010/0682 http://secunia.com/advisories/39206 http://www.mandriva.com/security/advisories?name=MDVSA-2010:063 http://lists.vmware.com/pipermail/security-announce/2010/000090.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-1382`	vulnerable	2026-06-08 04:50:20.191245	Details available libpng 1.0.6 through 1.0.32, 1.2.0 through 1.2.26, and 1.4.0beta01 through 1.4.0beta19 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a PNG file with zero length "unknown" chunks, which trigger an access of uninitialized memory. Published: 2008-04-14T16:00:00.000Z Updated: 2024-08-07T08:17:34.684Z Open on db.gcve.eu Reference links http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00011.html http://www.redhat.com/support/errata/RHSA-2009-0333.html http://secunia.com/advisories/35386 http://www.vupen.com/english/advisories/2008/1225/references http://secunia.com/advisories/30157	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-7244`	vulnerable	2026-06-08 04:49:30.875278	Details available Memory leak in pngwutil.c in libpng 1.2.13beta1, and other versions before 1.2.15beta3, allows context-dependent attackers to cause a denial of service (memory leak or segmentation fault) via a JPEG image containing an iCCP chunk with a negative embedded profile length. Published: 2011-08-31T23:00:00.000Z Updated: 2024-09-16T22:46:05.492Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2011/03/22/7 http://www.openwall.com/lists/oss-security/2011/03/28/6 https://bugs.gentoo.org/159216?id=159216 http://libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng/libpng%3Ba=commitdiff%3Bh=948ee23a2a400672b1751cfc646a7467741e9b2e#patch18	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.