Search for packages
Package details: pkg:deb/debian/libpng1.6@1.6.28-1%2Bdeb9u1
purl pkg:deb/debian/libpng1.6@1.6.28-1%2Bdeb9u1
Next non-vulnerable version 1.6.39-2
Latest non-vulnerable version 1.6.39-2
Risk 4.5
Vulnerabilities affecting this package (5)
Vulnerability Summary Fixed by
VCID-4tue-v1vh-z3bn
Aliases:
CVE-2018-14048
An issue has been found in libpng 1.6.34. It is a SEGV in the function png_free_data in png.c, related to the recommended error handling for png_read_image.
1.6.37-3
Affected by 1 other vulnerability.
VCID-c8zs-kx3n-rydr
Aliases:
CVE-2017-12652
libpng before 1.6.32 does not properly check the length of chunks against the user limit.
1.6.36-6
Affected by 2 other vulnerabilities.
VCID-np17-4h8x-kyf5
Aliases:
CVE-2019-7317
A use-after-free vulnerability was discovered in the png_image_free function in the libpng library. This could lead to denial of service or a potentially exploitable crash when a malformed image is processed.
1.6.36-6
Affected by 2 other vulnerabilities.
VCID-xw6k-28er-7kgr
Aliases:
CVE-2018-14550
GHSA-qwwr-qc2p-6283
An issue has been found in third-party PNM decoding associated with libpng 1.6.35. It is a stack-based buffer overflow in the function get_token in pnm2png.c in pnm2png.
1.6.37-3
Affected by 1 other vulnerability.
VCID-y12k-jgjw-73f1
Aliases:
CVE-2018-13785
In libpng 1.6.34, a wrong calculation of row_factor in the png_check_chunk_length function (pngrutil.c) may trigger an integer overflow and resultant divide-by-zero while processing a crafted PNG file, leading to a denial of service.
1.6.36-6
Affected by 2 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-08-01T19:19:16.476557+00:00 Debian Oval Importer Affected by VCID-4tue-v1vh-z3bn https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T19:02:10.669683+00:00 Debian Oval Importer Affected by VCID-np17-4h8x-kyf5 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T14:01:42.838050+00:00 Debian Oval Importer Affected by VCID-c8zs-kx3n-rydr https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T12:19:39.532233+00:00 Debian Oval Importer Affected by VCID-y12k-jgjw-73f1 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T12:03:11.342815+00:00 Debian Oval Importer Affected by VCID-xw6k-28er-7kgr https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0