GCVE - cpe:2.3:a:libpng:libpng:1.6.7:beta:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:libpng:libpng:1.6.7:beta:*:*:*:*:*:*

part: a version: 1.6.7 update: beta

Vendor	Libpng (`b87086c8-9966-53f7-b270-df72ee4b8d73`)
Product	Libpng (`8c2111f0-4992-59d8-8db9-d4f954eb189a`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/glennrp/libpng`	purl2cpe	2026-06-01 10:15:49.493998
`pkg:sourceforge/libpng`	purl2cpe	2026-06-01 10:15:49.493999

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2015-0973`	vulnerable	2026-06-08 05:06:24.417224	Details available Buffer overflow in the png_read_IDAT_data function in pngrutil.c in libpng before 1.5.21 and 1.6.x before 1.6.16 allows context-dependent attackers to execute arbitrary code via IDAT data with a large width, a different vulnerability than CVE-2014-9495. Published: 2015-01-18T18:00:00.000Z Updated: 2025-06-09T15:25:54.990Z Open on db.gcve.eu Reference links http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html https://support.apple.com/HT206167 http://sourceforge.net/p/png-mng/mailman/message/33173461/ http://www.openwall.com/lists/oss-security/2015/01/10/1 http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-9495`	vulnerable	2026-06-08 05:06:11.960091	Details available Heap-based buffer overflow in the png_combine_row function in libpng before 1.5.21 and 1.6.x before 1.6.16, when running on 64-bit systems, might allow context-dependent attackers to execute arbitrary code via a "very wide interlaced" PNG image. Published: 2015-01-10T19:00:00.000Z Updated: 2025-06-09T15:16:20.021Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2015/01/04/3 http://www.securityfocus.com/bid/71820 http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html https://support.apple.com/HT206167 http://sourceforge.net/p/png-mng/mailman/message/33173461/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-0333`	vulnerable	2026-06-08 05:05:12.598674	Details available The png_push_read_chunk function in pngpread.c in the progressive decoder in libpng 1.6.x through 1.6.9 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via an IDAT chunk with a length of zero. Published: 2014-02-27T20:00:00.000Z Updated: 2024-08-06T09:13:10.390Z Open on db.gcve.eu Reference links ftp://ftp.simplesystems.org/pub/png/src/libpng16/patch-libpng16-vu684412.diff https://sourceforge.net/projects/libpng/files/libpng16/patch-libpng16-vu684412.diff http://lists.opensuse.org/opensuse-updates/2014-03/msg00029.html http://www.kb.cert.org/vuls/id/684412	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-6954`	vulnerable	2026-06-08 05:05:07.507030	Details available The png_do_expand_palette function in libpng before 1.6.8 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via (1) a PLTE chunk of zero bytes or (2) a NULL palette, related to pngrtran.c and pngset.c. Published: 2014-01-12T15:00:00.000Z Updated: 2025-06-10T13:18:13.099Z Open on db.gcve.eu Reference links https://www.ibm.com/support/docview.wss?uid=swg21675973 https://access.redhat.com/errata/RHSA-2014:0414 http://security.gentoo.org/glsa/glsa-201406-32.xml http://advisories.mageia.org/MGASA-2014-0075.html http://lists.fedoraproject.org/pipermail/package-announce/2014-February/128098.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.