GCVE - cpe:2.3:a:libpng:libpng:1.2.24:beta03:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:libpng:libpng:1.2.24:beta03:*:*:*:*:*:*

part: a version: 1.2.24 update: beta03

Vendor	Libpng (`b87086c8-9966-53f7-b270-df72ee4b8d73`)
Product	Libpng (`8c2111f0-4992-59d8-8db9-d4f954eb189a`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/glennrp/libpng`	purl2cpe	2026-06-01 10:15:49.205367
`pkg:sourceforge/libpng`	purl2cpe	2026-06-01 10:15:49.205369

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2009-2042`	vulnerable	2026-06-08 04:51:26.290303	Details available libpng before 1.2.37 does not properly parse 1-bit interlaced images with width values that are not divisible by 8, which causes libpng to include uninitialized bits in certain rows of a PNG file and might allow remote attackers to read portions of sensitive memory via "out-of-bounds pixels" in the file. Published: 2009-06-12T20:07:00.000Z Updated: 2024-08-07T05:36:20.484Z Open on db.gcve.eu Reference links http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.551809 http://www.vupen.com/english/advisories/2010/0682 http://secunia.com/advisories/39206 http://www.mandriva.com/security/advisories?name=MDVSA-2010:063 http://lists.vmware.com/pipermail/security-announce/2010/000090.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-6218`	vulnerable	2026-06-08 04:50:54.596855	Details available Memory leak in the png_handle_tEXt function in pngrutil.c in libpng before 1.2.33 rc02 and 1.4.0 beta36 allows context-dependent attackers to cause a denial of service (memory exhaustion) via a crafted PNG file. Published: 2009-02-20T17:00:00.000Z Updated: 2024-08-07T11:20:25.536Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/46115 http://security.gentoo.org/glsa/glsa-200903-28.xml http://www.mandriva.com/security/advisories?name=MDVSA-2010:133 http://www.vupen.com/english/advisories/2008/2917 http://www.securityfocus.com/bid/31920	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-1382`	vulnerable	2026-06-08 04:50:20.325184	Details available libpng 1.0.6 through 1.0.32, 1.2.0 through 1.2.26, and 1.4.0beta01 through 1.4.0beta19 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a PNG file with zero length "unknown" chunks, which trigger an access of uninitialized memory. Published: 2008-04-14T16:00:00.000Z Updated: 2024-08-07T08:17:34.684Z Open on db.gcve.eu Reference links http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00011.html http://www.redhat.com/support/errata/RHSA-2009-0333.html http://secunia.com/advisories/35386 http://www.vupen.com/english/advisories/2008/1225/references http://secunia.com/advisories/30157	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.