Total vulnerabilities in the database
The png_do_expand_palette function in libpng before 1.6.8 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via (1) a PLTE chunk of zero bytes or (2) a NULL palette, related to pngrtran.c and pngset.c.
| Software | From | Fixed in |
|---|---|---|
| libpng / libpng | 1.6.0 | 1.6.0.x |
| libpng / libpng | 1.6.1 | 1.6.1.x |
| libpng / libpng | 1.6.3 | 1.6.3.x |
| libpng / libpng | 1.6.0-beta | 1.6.0-beta.x |
| libpng / libpng | 1.6.4-beta | 1.6.4-beta.x |
| libpng / libpng | 1.6.7-beta | 1.6.7-beta.x |
| libpng / libpng | 1.6.1-beta | 1.6.1-beta.x |
| libpng / libpng | 1.6.6 | 1.6.6.x |
| libpng / libpng | 1.6.7 | 1.6.7.x |
| libpng / libpng | - | 1.6.8.x |
| libpng / libpng | 1.6.4 | 1.6.4.x |
| libpng / libpng | 1.6.3-beta | 1.6.3-beta.x |
| libpng / libpng | 1.6.2-beta | 1.6.2-beta.x |
| libpng / libpng | 1.6.2 | 1.6.2.x |
| libpng / libpng | 1.6.5 | 1.6.5.x |