Search for packages
| purl | pkg:deb/debian/libpng1.6@1.6.37-3 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-9594-e1mw-xufe
Aliases: CVE-2019-6129 |
png_create_info_struct in png.c in libpng 1.6.36 has a memory leak, as demonstrated by pngcp. NOTE: a third party has stated "I don't think it is libpng's job to free this buffer. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-4tue-v1vh-z3bn | An issue has been found in libpng 1.6.34. It is a SEGV in the function png_free_data in png.c, related to the recommended error handling for png_read_image. |
CVE-2018-14048
|
| VCID-xw6k-28er-7kgr | An issue has been found in third-party PNM decoding associated with libpng 1.6.35. It is a stack-based buffer overflow in the function get_token in pnm2png.c in pnm2png. |
CVE-2018-14550
GHSA-qwwr-qc2p-6283 |
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-08-01T19:19:16.485833+00:00 | Debian Oval Importer | Fixing | VCID-4tue-v1vh-z3bn | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 37.0.0 |
| 2025-08-01T13:01:07.293411+00:00 | Debian Importer | Affected by | VCID-9594-e1mw-xufe | https://security-tracker.debian.org/tracker/data/json | 37.0.0 |
| 2025-08-01T12:03:11.356306+00:00 | Debian Oval Importer | Fixing | VCID-xw6k-28er-7kgr | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 37.0.0 |