Approved changes feed: RSS · Atom

cpe:2.3:a:libpng:libpng:1.6.36:*:*:*:*:*:*:*

part: a version: 1.6.36 update: *

VendorLibpng (b87086c8-9966-53f7-b270-df72ee4b8d73)
ProductLibpng (8c2111f0-4992-59d8-8db9-d4f954eb189a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/glennrp/libpng purl2cpe 2026-06-01 10:15:49.493881
pkg:sourceforge/libpng purl2cpe 2026-06-01 10:15:49.493882

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-6129 vulnerable 2026-06-08 05:14:08.798105 Details available
png_create_info_struct in png.c in libpng 1.6.36 has a memory leak, as demonstrated by pngcp. NOTE: a third party has stated "I don't think it is libpng's job to free this buffer.
Published: 2019-01-11T05:00:00.000Z
Updated: 2026-05-28T18:10:31.654Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.