Search for packages
| purl | pkg:deb/debian/libpng@1.2.49-1%2Bdeb7u2 |
| Next non-vulnerable version | 1.2.50-2+deb8u3 |
| Latest non-vulnerable version | 1.2.50-2+deb8u3 |
| Risk | 4.5 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-2vwq-s4y4-aaae
Aliases: CVE-2015-8126 |
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') Multiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a small bit-depth value in an IHDR (aka image header) chunk in a PNG image. |
Affected by 0 other vulnerabilities. |
|
VCID-52ek-nmkc-aaaf
Aliases: CVE-2015-8540 |
Out-of-bounds Read Integer underflow in the png_check_keyword function in pngwutil.c in libpng allows remote attackers to have unspecified impact via a space character as a keyword in a PNG image, which triggers an out-of-bounds read. |
Affected by 0 other vulnerabilities. |
|
VCID-canc-ytmr-aaae
Aliases: CVE-2015-8472 |
Improper Restriction of Operations within the Bounds of a Memory Buffer Buffer overflow in the png_set_PLTE function in libpng allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a small bit-depth value in an IHDR (aka image header) chunk in a PNG image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-8126. |
Affected by 0 other vulnerabilities. |
|
VCID-t8mn-b96e-aaaj
Aliases: CVE-2015-7981 |
Exposure of Sensitive Information to an Unauthorized Actor The png_convert_to_rfc1123 function in png.c in libpng allows remote attackers to obtain sensitive process memory information via crafted tIME chunk data in an image file, which triggers an out-of-bounds read. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-2vwq-s4y4-aaae | Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') Multiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a small bit-depth value in an IHDR (aka image header) chunk in a PNG image. |
CVE-2015-8126
|
| VCID-52ek-nmkc-aaaf | Out-of-bounds Read Integer underflow in the png_check_keyword function in pngwutil.c in libpng allows remote attackers to have unspecified impact via a space character as a keyword in a PNG image, which triggers an out-of-bounds read. |
CVE-2015-8540
|
| VCID-canc-ytmr-aaae | Improper Restriction of Operations within the Bounds of a Memory Buffer Buffer overflow in the png_set_PLTE function in libpng allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a small bit-depth value in an IHDR (aka image header) chunk in a PNG image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-8126. |
CVE-2015-8472
|
| VCID-t8mn-b96e-aaaj | Exposure of Sensitive Information to an Unauthorized Actor The png_convert_to_rfc1123 function in png.c in libpng allows remote attackers to obtain sensitive process memory information via crafted tIME chunk data in an image file, which triggers an out-of-bounds read. |
CVE-2015-7981
|
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-06-21T10:03:18.984331+00:00 | Debian Oval Importer | Affected by | VCID-52ek-nmkc-aaaf | https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 | 36.1.3 |
| 2025-06-21T09:59:01.349277+00:00 | Debian Oval Importer | Affected by | VCID-2vwq-s4y4-aaae | https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 | 36.1.3 |
| 2025-06-21T09:51:45.480525+00:00 | Debian Oval Importer | Affected by | VCID-t8mn-b96e-aaaj | https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 | 36.1.3 |
| 2025-06-21T09:31:49.272509+00:00 | Debian Oval Importer | Affected by | VCID-canc-ytmr-aaae | https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 | 36.1.3 |
| 2025-06-21T09:18:36.218031+00:00 | Debian Oval Importer | Fixing | VCID-52ek-nmkc-aaaf | https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 | 36.1.3 |
| 2025-06-21T09:06:33.704900+00:00 | Debian Oval Importer | Fixing | VCID-canc-ytmr-aaae | https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 | 36.1.3 |
| 2025-06-21T09:05:17.240322+00:00 | Debian Oval Importer | Fixing | VCID-2vwq-s4y4-aaae | https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 | 36.1.3 |
| 2025-06-21T08:59:55.083171+00:00 | Debian Oval Importer | Fixing | VCID-t8mn-b96e-aaaj | https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 | 36.1.3 |
| 2025-06-20T19:50:51.571642+00:00 | Debian Oval Importer | Affected by | VCID-canc-ytmr-aaae | None | 36.1.3 |
| 2025-06-20T19:43:35.549565+00:00 | Debian Oval Importer | Affected by | VCID-t8mn-b96e-aaaj | None | 36.1.3 |
| 2025-06-20T19:23:14.763579+00:00 | Debian Oval Importer | Fixing | VCID-canc-ytmr-aaae | None | 36.1.3 |
| 2025-06-20T19:22:52.052828+00:00 | Debian Oval Importer | Fixing | VCID-t8mn-b96e-aaaj | None | 36.1.3 |
| 2025-06-08T03:52:27.391552+00:00 | Debian Oval Importer | Affected by | VCID-52ek-nmkc-aaaf | https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 | 36.1.0 |
| 2025-06-08T03:48:05.342243+00:00 | Debian Oval Importer | Affected by | VCID-2vwq-s4y4-aaae | https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 | 36.1.0 |
| 2025-06-08T03:40:26.186697+00:00 | Debian Oval Importer | Affected by | VCID-t8mn-b96e-aaaj | https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 | 36.1.0 |
| 2025-06-08T03:20:15.640651+00:00 | Debian Oval Importer | Affected by | VCID-canc-ytmr-aaae | https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 | 36.1.0 |
| 2025-06-08T03:06:25.258191+00:00 | Debian Oval Importer | Fixing | VCID-52ek-nmkc-aaaf | https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 | 36.1.0 |
| 2025-06-08T02:53:43.102257+00:00 | Debian Oval Importer | Fixing | VCID-canc-ytmr-aaae | https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 | 36.1.0 |
| 2025-06-08T02:52:21.689819+00:00 | Debian Oval Importer | Fixing | VCID-2vwq-s4y4-aaae | https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 | 36.1.0 |
| 2025-06-08T02:46:43.533350+00:00 | Debian Oval Importer | Fixing | VCID-t8mn-b96e-aaaj | https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 | 36.1.0 |
| 2025-06-07T13:42:15.950930+00:00 | Debian Oval Importer | Affected by | VCID-canc-ytmr-aaae | None | 36.1.0 |
| 2025-06-07T13:36:19.951525+00:00 | Debian Oval Importer | Affected by | VCID-t8mn-b96e-aaaj | None | 36.1.0 |
| 2025-06-07T13:22:05.796394+00:00 | Debian Oval Importer | Fixing | VCID-canc-ytmr-aaae | None | 36.1.0 |
| 2025-06-07T13:21:44.396423+00:00 | Debian Oval Importer | Fixing | VCID-t8mn-b96e-aaaj | None | 36.1.0 |
| 2025-06-03T13:21:28.900807+00:00 | Debian Oval Importer | Fixing | VCID-canc-ytmr-aaae | None | 36.1.2 |
| 2025-06-03T13:21:07.632707+00:00 | Debian Oval Importer | Fixing | VCID-t8mn-b96e-aaaj | None | 36.1.2 |
| 2025-04-08T02:20:19.633134+00:00 | Debian Oval Importer | Affected by | VCID-52ek-nmkc-aaaf | https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 | 36.0.0 |
| 2025-04-08T02:15:52.791829+00:00 | Debian Oval Importer | Affected by | VCID-2vwq-s4y4-aaae | https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 | 36.0.0 |
| 2025-04-08T02:08:16.034948+00:00 | Debian Oval Importer | Affected by | VCID-t8mn-b96e-aaaj | https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 | 36.0.0 |
| 2025-04-08T01:47:40.248308+00:00 | Debian Oval Importer | Affected by | VCID-canc-ytmr-aaae | https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 | 36.0.0 |
| 2025-04-08T01:33:38.941913+00:00 | Debian Oval Importer | Fixing | VCID-52ek-nmkc-aaaf | https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 | 36.0.0 |
| 2025-04-08T01:20:58.316379+00:00 | Debian Oval Importer | Fixing | VCID-canc-ytmr-aaae | https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 | 36.0.0 |
| 2025-04-08T01:19:36.293626+00:00 | Debian Oval Importer | Fixing | VCID-2vwq-s4y4-aaae | https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 | 36.0.0 |
| 2025-04-08T01:13:54.132321+00:00 | Debian Oval Importer | Fixing | VCID-t8mn-b96e-aaaj | https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 | 36.0.0 |
| 2025-04-07T12:17:34.769787+00:00 | Debian Oval Importer | Affected by | VCID-canc-ytmr-aaae | None | 36.0.0 |
| 2025-04-07T12:11:45.290069+00:00 | Debian Oval Importer | Affected by | VCID-t8mn-b96e-aaaj | None | 36.0.0 |
| 2025-04-07T11:57:36.355456+00:00 | Debian Oval Importer | Fixing | VCID-canc-ytmr-aaae | None | 36.0.0 |
| 2025-04-07T11:57:14.685796+00:00 | Debian Oval Importer | Fixing | VCID-t8mn-b96e-aaaj | None | 36.0.0 |