Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:nuget/libpng@1.6.28.1
purl pkg:nuget/libpng@1.6.28.1
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 4.4
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-8g2j-rqsk-zqfh
Aliases:
CVE-2017-12652
Improper Input Validation libpng does not properly check the length of chunks against the user limit. There are no reported fixed by versions.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-zetn-zwnv-u7gf NULL Pointer Dereference The png_set_text_2 function in libpng allows context-dependent attackers to cause a NULL pointer dereference vectors involving loading a text chunk into a png structure, removing the text, and then adding another text chunk to the structure. CVE-2016-10087

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T20:55:59.940228+00:00 GitLab Importer Affected by VCID-8g2j-rqsk-zqfh https://gitlab.com/gitlab-org/advisories-community/-/blob/main/nuget/libpng/CVE-2017-12652.yml 38.4.0
2026-04-11T22:07:01.331492+00:00 GitLab Importer Affected by VCID-8g2j-rqsk-zqfh https://gitlab.com/gitlab-org/advisories-community/-/blob/main/nuget/libpng/CVE-2017-12652.yml 38.3.0
2026-04-02T22:19:48.684591+00:00 GitLab Importer Affected by VCID-8g2j-rqsk-zqfh https://gitlab.com/gitlab-org/advisories-community/-/blob/main/nuget/libpng/CVE-2017-12652.yml 38.1.0
2026-04-01T16:37:35.256580+00:00 GitLab Importer Affected by VCID-8g2j-rqsk-zqfh https://gitlab.com/gitlab-org/advisories-community/-/blob/main/nuget/libpng/CVE-2017-12652.yml 38.0.0
2026-04-01T12:47:10.641855+00:00 GitLab Importer Fixing VCID-zetn-zwnv-u7gf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/nuget/libpng/CVE-2016-10087.yml 38.0.0