Total vulnerabilities in the database
Memory leak in the embedded_profile_len function in pngwutil.c in libpng before 1.2.39beta5 allows context-dependent attackers to cause a denial of service (memory leak or segmentation fault) via a JPEG image containing an iCCP chunk with a negative embedded profile length. NOTE: this is due to an incomplete fix for CVE-2006-7244.
| Software | From | Fixed in |
|---|---|---|
| libpng / libpng | 1.2.39-beta3 | 1.2.39-beta3.x |
| libpng / libpng | 1.2.39-beta2 | 1.2.39-beta2.x |
| libpng / libpng | 1.2.39-beta1 | 1.2.39-beta1.x |
| libpng / libpng | 1.2.39-beta4 | 1.2.39-beta4.x |
| libpng / libpng | - | 1.2.38.x |
| libpng / libpng | 1.2.39 | 1.2.39.x |