Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-1j6j-upj4-37hk
Vulnerability ID VCID-1j6j-upj4-37hk
Aliases CVE-2009-2042
Summary A vulnerability has been discovered in libpng that allows for information disclosure.
Status Published
Exploitability 0.5
Weighted Severity 0.0
Risk None
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.03106 https://api.first.org/data/v1/epss?cve=CVE-2009-2042
epss 0.03106 https://api.first.org/data/v1/epss?cve=CVE-2009-2042
epss 0.03147 https://api.first.org/data/v1/epss?cve=CVE-2009-2042
epss 0.03147 https://api.first.org/data/v1/epss?cve=CVE-2009-2042
epss 0.03147 https://api.first.org/data/v1/epss?cve=CVE-2009-2042
epss 0.03147 https://api.first.org/data/v1/epss?cve=CVE-2009-2042
epss 0.03147 https://api.first.org/data/v1/epss?cve=CVE-2009-2042
epss 0.03147 https://api.first.org/data/v1/epss?cve=CVE-2009-2042
epss 0.03147 https://api.first.org/data/v1/epss?cve=CVE-2009-2042
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2042.json
https://api.first.org/data/v1/epss?cve=CVE-2009-2042
504782 https://bugzilla.redhat.com/show_bug.cgi?id=504782
GLSA-200906-01 https://security.gentoo.org/glsa/200906-01
GLSA-201412-08 https://security.gentoo.org/glsa/201412-08
RHSA-2010:0534 https://access.redhat.com/errata/RHSA-2010:0534
USN-913-1 https://usn.ubuntu.com/913-1/
No exploits are available.
There are no known vectors.
Exploit Prediction Scoring System (EPSS)
Percentile 0.86818
EPSS Score 0.03106
Published At April 12, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T13:10:03.502628+00:00 Gentoo Importer Import https://security.gentoo.org/glsa/200906-01 38.0.0