CVEvulnerability

CVE-2006-5793

2.6 LOW Published 2006-11-17 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2006-11-17
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
2.6 LOW — AV:N/AC:H/Au:N/C:N/I:N/A:P
Weaknesses
CWE-20

Description

The sPLT chunk handling code (png_set_sPLT function in pngset.c) in libpng 1.0.6 through 1.2.12 uses a sizeof operator on the wrong data type, which allows context-dependent attackers to cause a denial of service (crash) via malformed sPLT chunks that trigger an out-of-bounds read.

Affected configurations

• greg roelofs libpng 1.0.6 • greg roelofs libpng 1.0.7 • greg roelofs libpng 1.0.8 • greg roelofs libpng 1.0.9 • greg roelofs libpng 1.2.0 • greg roelofs libpng 1.2.1 • greg roelofs libpng 1.2.2 • greg roelofs libpng 1.2.3 • greg roelofs libpng 1.2.4 • greg roelofs libpng 1.2.5 • greg roelofs libpng 1.2.6 • greg roelofs libpng 1.2.7 • greg roelofs libpng 1.2.7rc1 • greg roelofs libpng 1.2.8 • greg roelofs libpng 1.2.9 • greg roelofs libpng 1.2.10 • greg roelofs libpng 1.2.11 • greg roelofs libpng 1.2.12

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References