Approved changes feed: RSS · Atom

cpe:2.3:a:libpng:libpng:1.6.34:*:*:*:*:*:*:*

part: a version: 1.6.34 update: *

VendorLibpng (b87086c8-9966-53f7-b270-df72ee4b8d73)
ProductLibpng (8c2111f0-4992-59d8-8db9-d4f954eb189a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/glennrp/libpng purl2cpe 2026-06-01 10:15:49.493856
pkg:sourceforge/libpng purl2cpe 2026-06-01 10:15:49.493858

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-14048 vulnerable 2026-06-08 05:10:52.639539 Details available
An issue has been found in libpng 1.6.34. It is a SEGV in the function png_free_data in png.c, related to the recommended error handling for png_read_image.
Published: 2018-07-13T16:00:00.000Z
Updated: 2024-08-05T09:21:40.889Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-13785 vulnerable 2026-06-08 05:10:51.760160 Details available
In libpng 1.6.34, a wrong calculation of row_factor in the png_check_chunk_length function (pngrutil.c) may trigger an integer overflow and resultant divide-by-zero while processing a crafted PNG file, leading to a denial of service.
Published: 2018-07-09T13:00:00.000Z
Updated: 2026-05-29T20:13:17.997Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.