Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:ebuild/media-libs/libpng@1.3
purl pkg:ebuild/media-libs/libpng@1.3
Next non-vulnerable version 1.4.3
Latest non-vulnerable version 1.6.51
Risk 3.0
Vulnerabilities affecting this package (3)
Vulnerability Summary Fixed by
VCID-h89j-mr17-rua9
Aliases:
CVE-2013-7354
Uncontrolled Resource Consumption Multiple integer overflows in libpng rc03 allow remote attackers to cause a denial of service (crash) via a crafted image to the (1) png_set_sPLT or (2) png_set_text_2 function, which triggers a heap-based buffer overflow.
1.6.10
Affected by 0 other vulnerabilities.
VCID-nhbw-6tpy-pbh3
Aliases:
CVE-2014-0333
Uncontrolled Resource Consumption The png_push_read_chunk function in pngpread.c in the progressive decoder in libpng allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via an IDAT chunk with a length of zero.
1.6.10
Affected by 0 other vulnerabilities.
VCID-una1-4acn-s3dy
Aliases:
CVE-2013-7353
Heap-based Buffer Overflow Integer overflow in the png_set_unknown_chunks function in libpng/pngset.c in libpng beta08 allows context-dependent attackers to cause a denial of service (segmentation fault and crash) via a crafted image, which triggers a heap-based buffer overflow.
1.6.10
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T13:01:42.777744+00:00 Gentoo Importer Affected by VCID-nhbw-6tpy-pbh3 https://security.gentoo.org/glsa/201408-06 38.0.0
2026-04-01T13:01:42.766450+00:00 Gentoo Importer Affected by VCID-h89j-mr17-rua9 https://security.gentoo.org/glsa/201408-06 38.0.0
2026-04-01T13:01:42.752487+00:00 Gentoo Importer Affected by VCID-una1-4acn-s3dy https://security.gentoo.org/glsa/201408-06 38.0.0