Approved changes feed: RSS · Atom

cpe:2.3:a:libpng:pngcheck:2.4.0:*:*:*:*:*:*:*

part: a version: 2.4.0 update: *

VendorLibpng (b87086c8-9966-53f7-b270-df72ee4b8d73)
ProductPngcheck (1cbcbe45-0b9f-52ed-ba20-181113166aec)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/pngcheck purl2cpe 2026-06-01 10:15:49.647405
pkg:deb/ubuntu/pngcheck purl2cpe 2026-06-01 10:15:49.647408
pkg:github/wkliu19/pngcheck purl2cpe 2026-06-01 10:15:49.647411
pkg:rpm/fedora/pngcheck purl2cpe 2026-06-01 10:15:49.647414
pkg:rpm/opensuse/pngcheck purl2cpe 2026-06-01 10:15:49.647416

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-35511 vulnerable 2026-06-08 05:25:01.261996 Details available
A global buffer overflow was discovered in pngcheck function in pngcheck-2.4.0(5 patches applied) via a crafted png file.
Published: 2022-08-23T00:00:00.000Z
Updated: 2024-08-04T17:02:08.230Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-27818 vulnerable 2026-06-08 05:23:53.230072 Details available
A flaw was found in the check_chunk_name() function of pngcheck-2.4.0. An attacker able to pass a malicious file to be processed by pngcheck could cause a temporary denial of service, posing a low risk to application availability.
Published: 2020-12-08T00:04:55.000Z
Updated: 2024-08-04T16:25:43.451Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.