Fluid Attacks Database

Description

libpng before 1.6.32 does not properly check the length of chunks against the user limit.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
debian 11	libpng1.6	>=0 <1.6.32-1	1.6.32-1
debian 14	libpng1.6	>=0 <1.6.32-1	1.6.32-1
debian 12	libpng1.6	>=0 <1.6.32-1	1.6.32-1
nuget	libpng	>=0 <1.6.32	-
debian 13	libpng1.6	>=0 <1.6.32-1	1.6.32-1
rpm rhel6	libpng	-	-
rpm rhel7	libpng	<2:1.5.13-8.el7	2:1.5.13-8.el7
rpm rhel5	libpng	-	-

Aliases

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.