CVEvulnerability

CVE-2009-0040

6.8 MEDIUM Published 2009-02-22 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2009-02-22
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-824

Description

The PNG reference library (aka libpng) before 1.0.43, and 1.2.x before 1.2.35, as used in pngcrush and other applications, allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PNG file that triggers a free of an uninitialized pointer in (1) the png_read_png function, (2) pCAL chunk handling, or (3) setup of 16-bit gamma tables.

Affected configurations

• libpng libpng (< 1.0.43) • libpng libpng (>= 1.2.0 < 1.2.35) • apple iphone os (< 3.0) • apple mac os x (< 10.5.8) • opensuse opensuse 10.3 • opensuse opensuse 11.0 • opensuse opensuse 11.1 • suse linux enterprise 9.0 • suse linux enterprise 10.0 • suse linux enterprise desktop 10 • suse linux enterprise server 10 • debian debian linux 4.0 • debian debian linux 5.0 • fedoraproject fedora 9 • fedoraproject fedora 10

Related

Weakness · CWE (1)

  • CWE-824 Access of Uninitialized Pointer weakness

Referenced by CWE · observed example (1)

  • CWE-824 Access of Uninitialized Pointer weakness

References