Approved changes feed: RSS · Atom

cpe:2.3:a:pngcrush_project:pngcrush:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPngcrush Project (5bb6b3a4-1c61-5405-9914-43d64bd2d4f0)
ProductPngcrush (621664e7-5357-5c4a-8615-ee980a1af743)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/pngcrush purl2cpe 2026-06-01 10:18:09.012499
pkg:deb/ubuntu/pngcrush purl2cpe 2026-06-01 10:18:09.012502
pkg:github/kjuly/pngcrush purl2cpe 2026-06-01 10:18:09.012505
pkg:rpm/fedora/pngcrush purl2cpe 2026-06-01 10:18:09.012508
pkg:rpm/opensuse/pngcrush purl2cpe 2026-06-01 10:18:09.012510
pkg:sourceforge/pmt purl2cpe 2026-06-01 10:18:09.012513

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-7700 vulnerable 2026-06-08 05:07:01.702951 Details available
Double-free vulnerability in the sPLT chunk structure and png.c in pngcrush before 1.7.87 allows attackers to have unspecified impact via unknown vectors.
Published: 2017-08-31T22:00:00.000Z
Updated: 2024-08-06T07:58:59.660Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2158 vulnerable 2026-06-08 05:06:27.629924 Details available
Off-by-one error in the pngcrush_measure_idat function in pngcrush.c in pngcrush before 1.7.84 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PNG file.
Published: 2017-10-06T15:00:00.000Z
Updated: 2024-08-06T05:10:14.433Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.