[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fFNMGBHKj5_LH8HSHhknE8POtN1keUw93E3vPy7XaiA0":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":31,"kevVulnerabilities":96,"topProductsByCves":97,"seoMetadata":101,"meta":110},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":30},17688,"libpng",3,47,0,342,"2023-03-06","l",[16,20,26],{"id":17,"product_name":8,"version_count":18,"cve_count":19,"kev_count":11,"last_cve_update":13},103623,340,45,{"id":21,"product_name":22,"version_count":23,"cve_count":24,"kev_count":11,"last_cve_update":25},103624,"pngcheck",1,2,"2022-08-23",{"id":27,"product_name":28,"version_count":23,"cve_count":11,"kev_count":11,"last_cve_update":29},103622,"libgpng",null,"Libpng is a technology vendor with 3 tracked products and 47 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[32,41,49,56,62,69,75,81,86,91],{"cveId":33,"description":34,"publishedDate":35,"cvssScore":36,"cvssVersion":37,"severity":38,"isKev":39,"epssScore":40},"CVE-2010-1205","Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote attackers to execute arbitrary code via a PNG image that triggers an additional data row.","2010-06-30",9.8,"v3.1","Critical",false,0.43382,{"cveId":42,"description":43,"publishedDate":44,"cvssScore":45,"cvssVersion":46,"severity":47,"isKev":39,"epssScore":48},"CVE-2015-8126","Multiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x before 1.5.24, and 1.6.x before 1.6.19 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a small bit-depth value in an IHDR (aka image header) chunk in a PNG image.","2015-11-13",7.5,"v2","High",0.10339,{"cveId":50,"description":51,"publishedDate":52,"cvssScore":53,"cvssVersion":37,"severity":54,"isKev":39,"epssScore":55},"CVE-2019-7317","png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.","2019-02-04",5.3,"Medium",0.09393,{"cveId":57,"description":58,"publishedDate":59,"cvssScore":60,"cvssVersion":46,"severity":54,"isKev":39,"epssScore":61},"CVE-2011-3048","The png_set_text_2 function in pngset.c in libpng 1.0.x before 1.0.59, 1.2.x before 1.2.49, 1.4.x before 1.4.11, and 1.5.x before 1.5.10 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted text chunk in a PNG image file, which triggers a memory allocation failure that is not properly handled, leading to a heap-based buffer overflow.","2012-05-29",6.8,0.0652,{"cveId":63,"description":64,"publishedDate":65,"cvssScore":66,"cvssVersion":67,"severity":47,"isKev":39,"epssScore":68},"CVE-2015-8540","Integer underflow in the png_check_keyword function in pngwutil.c in libpng 0.90 through 0.99, 1.0.x before 1.0.66, 1.1.x and 1.2.x before 1.2.56, 1.3.x and 1.4.x before 1.4.19, and 1.5.x before 1.5.26 allows remote attackers to have unspecified impact via a space character as a keyword in a PNG image, which triggers an out-of-bounds read.","2016-04-14",8.8,"v3.0",0.06484,{"cveId":70,"description":71,"publishedDate":72,"cvssScore":73,"cvssVersion":46,"severity":54,"isKev":39,"epssScore":74},"CVE-2015-7981","The png_convert_to_rfc1123 function in png.c in libpng 1.0.x before 1.0.64, 1.2.x before 1.2.54, and 1.4.x before 1.4.17 allows remote attackers to obtain sensitive process memory information via crafted tIME chunk data in an image file, which triggers an out-of-bounds read.","2015-11-24",5,0.06359,{"cveId":76,"description":77,"publishedDate":78,"cvssScore":79,"cvssVersion":67,"severity":47,"isKev":39,"epssScore":80},"CVE-2015-8472","Buffer overflow in the png_set_PLTE function in libpng before 1.0.65, 1.1.x and 1.2.x before 1.2.55, 1.3.x, 1.4.x before 1.4.18, 1.5.x before 1.5.25, and 1.6.x before 1.6.20 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a small bit-depth value in an IHDR (aka image header) chunk in a PNG image.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-8126.","2016-01-21",7.3,0.06054,{"cveId":82,"description":83,"publishedDate":84,"cvssScore":60,"cvssVersion":46,"severity":54,"isKev":39,"epssScore":85},"CVE-2011-0408","pngrtran.c in libpng 1.5.x before 1.5.1 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted palette-based PNG image that triggers a buffer overflow, related to the png_do_expand_palette function, the png_do_rgb_to_gray function, and an integer underflow.  NOTE: some of these details are obtained from third party information.","2011-01-18",0.05608,{"cveId":87,"description":88,"publishedDate":89,"cvssScore":45,"cvssVersion":46,"severity":47,"isKev":39,"epssScore":90},"CVE-2008-1382","libpng 1.0.6 through 1.0.32, 1.2.0 through 1.2.26, and 1.4.0beta01 through 1.4.0beta19 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a PNG file with zero length \"unknown\" chunks, which trigger an access of uninitialized memory.","2008-04-14",0.05514,{"cveId":92,"description":93,"publishedDate":94,"cvssScore":45,"cvssVersion":67,"severity":47,"isKev":39,"epssScore":95},"CVE-2016-10087","The png_set_text_2 function in libpng 0.71 before 1.0.67, 1.2.x before 1.2.57, 1.4.x before 1.4.20, 1.5.x before 1.5.28, and 1.6.x before 1.6.27 allows context-dependent attackers to cause a NULL pointer dereference vectors involving loading a text chunk into a png structure, removing the text, and then adding another text chunk to the structure.","2017-01-30",0.05131,[],[98,99,100],{"id":17,"product_name":8,"version_count":18,"cve_count":19,"kev_count":11,"last_cve_update":13},{"id":21,"product_name":22,"version_count":23,"cve_count":24,"kev_count":11,"last_cve_update":25},{"id":27,"product_name":28,"version_count":23,"cve_count":11,"kev_count":11,"last_cve_update":29},{"title":102,"metaDescription":103,"keywords":104,"structuredData":105},"Libpng - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Libpng covering 3 products with 47 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Libpng vulnerabilities, Libpng security, Libpng CVE, Libpng threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":106,"@type":107,"name":108,"description":103,"url":109},"https:\u002F\u002Fschema.org","Organization","Libpng","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Flibpng",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":111,"apiVersion":112},"2026-10-17T15:07:14.536Z","3.0"]