Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:nuget/libpng@1.6.6
purl pkg:nuget/libpng@1.6.6
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 3.4
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-9d14-kqac-nbbt
Aliases:
CVE-2015-8472
Improper Restriction of Operations within the Bounds of a Memory Buffer Buffer overflow in the png_set_PLTE function in libpng allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a small bit-depth value in an IHDR (aka image header) chunk in a PNG image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-8126.
1.6.18.1
Affected by 4 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T12:47:00.534055+00:00 GitLab Importer Affected by VCID-9d14-kqac-nbbt https://gitlab.com/gitlab-org/advisories-community/-/blob/main/nuget/libpng/CVE-2015-8472.yml 38.0.0