Search for packages
Package details: pkg:deb/debian/libpng1.6@1.6.28-1%2Bdeb9u1
purl pkg:deb/debian/libpng1.6@1.6.28-1%2Bdeb9u1
Next non-vulnerable version 1.6.39-2
Latest non-vulnerable version 1.6.39-2
Risk 4.5
Vulnerabilities affecting this package (5)
Vulnerability Summary Fixed by
VCID-4wrn-uqht-aaan
Aliases:
CVE-2017-12652
Improper Input Validation libpng does not properly check the length of chunks against the user limit.
1.6.36-6
Affected by 3 other vulnerabilities.
VCID-8hwe-kj4e-aaaj
Aliases:
CVE-2018-14048
An issue has been found in libpng 1.6.34. It is a SEGV in the function png_free_data in png.c, related to the recommended error handling for png_read_image.
1.6.37-3
Affected by 1 other vulnerability.
VCID-97x6-pdeg-aaah
Aliases:
CVE-2019-7317
png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.
1.6.36-6
Affected by 3 other vulnerabilities.
VCID-guvv-1uwj-aaas
Aliases:
CVE-2018-13785
In libpng 1.6.34, a wrong calculation of row_factor in the png_check_chunk_length function (pngrutil.c) may trigger an integer overflow and resultant divide-by-zero while processing a crafted PNG file, leading to a denial of service.
1.6.36-6
Affected by 3 other vulnerabilities.
VCID-pkbe-c1vr-aaaf
Aliases:
CVE-2018-14550
GHSA-qwwr-qc2p-6283
An issue has been found in third-party PNM decoding associated with libpng 1.6.35. It is a stack-based buffer overflow in the function get_token in pnm2png.c in pnm2png.
1.6.37-3
Affected by 1 other vulnerability.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-06-22T13:46:29.534911+00:00 Debian Importer Affected by VCID-pkbe-c1vr-aaaf None 36.1.3
2025-06-21T18:29:19.721740+00:00 Debian Oval Importer Affected by VCID-guvv-1uwj-aaas https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.1.3
2025-06-21T18:16:46.220321+00:00 Debian Oval Importer Affected by VCID-pkbe-c1vr-aaaf https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.1.3
2025-06-21T17:28:13.479700+00:00 Debian Oval Importer Affected by VCID-guvv-1uwj-aaas https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T14:22:47.348285+00:00 Debian Oval Importer Affected by VCID-97x6-pdeg-aaah https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T13:40:56.588497+00:00 Debian Importer Affected by VCID-4wrn-uqht-aaan None 36.1.3
2025-06-21T12:36:56.869652+00:00 Debian Oval Importer Affected by VCID-4wrn-uqht-aaan https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T05:57:07.231072+00:00 Debian Oval Importer Affected by VCID-8hwe-kj4e-aaaj None 36.1.3
2025-06-21T03:26:03.942981+00:00 Debian Oval Importer Affected by VCID-pkbe-c1vr-aaaf None 36.1.3
2025-06-20T22:08:47.840142+00:00 Debian Oval Importer Affected by VCID-4wrn-uqht-aaan None 36.1.3
2025-06-20T21:10:22.878999+00:00 Debian Oval Importer Affected by VCID-guvv-1uwj-aaas None 36.1.3
2025-06-20T21:09:05.244625+00:00 Debian Oval Importer Affected by VCID-97x6-pdeg-aaah None 36.1.3
2025-06-08T12:13:40.602746+00:00 Debian Oval Importer Affected by VCID-4wrn-uqht-aaan https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.1.0
2025-06-08T10:59:50.012947+00:00 Debian Oval Importer Affected by VCID-guvv-1uwj-aaas https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.1.0
2025-06-08T10:47:53.737367+00:00 Debian Oval Importer Affected by VCID-pkbe-c1vr-aaaf https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.1.0
2025-06-08T10:06:36.052174+00:00 Debian Oval Importer Affected by VCID-guvv-1uwj-aaas https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-08T07:15:52.114490+00:00 Debian Oval Importer Affected by VCID-97x6-pdeg-aaah https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-08T05:34:26.877226+00:00 Debian Oval Importer Affected by VCID-4wrn-uqht-aaan https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-07T23:35:43.202636+00:00 Debian Oval Importer Affected by VCID-8hwe-kj4e-aaaj None 36.1.0
2025-06-07T20:59:23.912751+00:00 Debian Oval Importer Affected by VCID-pkbe-c1vr-aaaf None 36.1.0
2025-06-07T15:32:45.184203+00:00 Debian Oval Importer Affected by VCID-4wrn-uqht-aaan None 36.1.0
2025-06-07T14:35:26.152976+00:00 Debian Oval Importer Affected by VCID-guvv-1uwj-aaas None 36.1.0
2025-06-07T14:34:23.610702+00:00 Debian Oval Importer Affected by VCID-97x6-pdeg-aaah None 36.1.0
2025-04-12T21:57:43.105197+00:00 Debian Oval Importer Affected by VCID-8hwe-kj4e-aaaj https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T21:44:46.201320+00:00 Debian Oval Importer Affected by VCID-97x6-pdeg-aaah https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T17:59:22.970397+00:00 Debian Oval Importer Affected by VCID-4wrn-uqht-aaan https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T16:42:39.356755+00:00 Debian Oval Importer Affected by VCID-guvv-1uwj-aaas https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T16:30:01.948605+00:00 Debian Oval Importer Affected by VCID-pkbe-c1vr-aaaf https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-08T08:38:56.695267+00:00 Debian Oval Importer Affected by VCID-guvv-1uwj-aaas https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-08T05:48:27.342720+00:00 Debian Oval Importer Affected by VCID-97x6-pdeg-aaah https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-08T04:05:55.336009+00:00 Debian Oval Importer Affected by VCID-4wrn-uqht-aaan https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-07T22:07:46.203421+00:00 Debian Oval Importer Affected by VCID-8hwe-kj4e-aaaj None 36.0.0
2025-04-07T19:29:49.720628+00:00 Debian Oval Importer Affected by VCID-pkbe-c1vr-aaaf None 36.0.0
2025-04-07T14:03:45.326515+00:00 Debian Oval Importer Affected by VCID-4wrn-uqht-aaan None 36.0.0
2025-04-07T13:07:33.029071+00:00 Debian Oval Importer Affected by VCID-guvv-1uwj-aaas None 36.0.0
2025-04-07T13:06:27.467844+00:00 Debian Oval Importer Affected by VCID-97x6-pdeg-aaah None 36.0.0
2025-04-07T00:32:37.413453+00:00 Debian Importer Affected by VCID-8hwe-kj4e-aaaj None 36.0.0
2025-04-06T07:08:59.694173+00:00 Debian Importer Affected by VCID-pkbe-c1vr-aaaf None 36.0.0
2025-04-05T10:13:35.716313+00:00 Debian Importer Affected by VCID-4wrn-uqht-aaan None 36.0.0
2025-02-19T01:37:01.487093+00:00 Debian Importer Affected by VCID-pkbe-c1vr-aaaf None 35.1.0
2025-02-19T01:28:23.902469+00:00 Debian Importer Affected by VCID-8hwe-kj4e-aaaj None 35.1.0
2025-02-18T20:06:29.463395+00:00 Debian Importer Affected by VCID-4wrn-uqht-aaan None 35.1.0
2024-11-21T23:05:48.677204+00:00 Debian Importer Affected by VCID-pkbe-c1vr-aaaf None 35.0.0
2024-11-21T23:04:43.956179+00:00 Debian Importer Affected by VCID-8hwe-kj4e-aaaj None 35.0.0
2024-11-21T17:54:14.643106+00:00 Debian Importer Affected by VCID-4wrn-uqht-aaan None 35.0.0
2024-11-19T22:10:06.443350+00:00 Debian Importer Affected by VCID-pkbe-c1vr-aaaf None 34.3.2
2024-11-19T22:09:02.826336+00:00 Debian Importer Affected by VCID-8hwe-kj4e-aaaj None 34.3.2
2024-11-19T17:11:20.690280+00:00 Debian Importer Affected by VCID-4wrn-uqht-aaan None 34.3.2
2024-10-08T23:16:08.934797+00:00 Debian Importer Affected by VCID-pkbe-c1vr-aaaf None 34.0.2
2024-10-08T23:15:08.678285+00:00 Debian Importer Affected by VCID-8hwe-kj4e-aaaj None 34.0.2
2024-10-08T18:47:54.912480+00:00 Debian Importer Affected by VCID-4wrn-uqht-aaan None 34.0.2
2024-09-18T11:41:37.379567+00:00 Debian Importer Affected by VCID-pkbe-c1vr-aaaf None 34.0.1
2024-09-18T11:31:37.590499+00:00 Debian Importer Affected by VCID-8hwe-kj4e-aaaj None 34.0.1
2024-09-18T06:52:32.949666+00:00 Debian Importer Affected by VCID-4wrn-uqht-aaan None 34.0.1
2024-04-24T12:32:12.062946+00:00 Debian Importer Affected by VCID-pkbe-c1vr-aaaf None 34.0.0rc4
2024-04-24T12:28:14.469870+00:00 Debian Importer Affected by VCID-8hwe-kj4e-aaaj None 34.0.0rc4
2024-04-24T10:50:58.062747+00:00 Debian Importer Affected by VCID-4wrn-uqht-aaan None 34.0.0rc4
2024-01-10T14:25:44.709377+00:00 Debian Importer Affected by VCID-pkbe-c1vr-aaaf None 34.0.0rc2
2024-01-10T14:22:48.393630+00:00 Debian Importer Affected by VCID-8hwe-kj4e-aaaj None 34.0.0rc2
2024-01-10T12:42:32.731185+00:00 Debian Importer Affected by VCID-4wrn-uqht-aaan None 34.0.0rc2
2024-01-04T05:21:08.774711+00:00 Debian Importer Affected by VCID-pkbe-c1vr-aaaf None 34.0.0rc1
2024-01-04T05:20:07.473865+00:00 Debian Importer Affected by VCID-8hwe-kj4e-aaaj None 34.0.0rc1
2024-01-04T04:19:56.323427+00:00 Debian Importer Affected by VCID-4wrn-uqht-aaan None 34.0.0rc1