PT-2018-12302 · Png Development+2 · Libpng+2

Ax3L + 1 · Publicado 2018-07-13 · Atualizado 2026-04-14 · CVE-2018-14048

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions libpng version 1.6.34

Description The issue is related to a SEGV in the function png free data in png.c, which is connected to the recommended error handling for png read image.

Recommendations For libpng version 1.6.34, consider applying the recommended error handling for png read image to prevent the SEGV in the png free data function. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

ALT-PU-2018-2451

ALT-PU-2019-2547

CLEANSTART-2026-NJ21771

CVE-2018-14048

OPENSUSE-SU-2024:10972-1

USN-5432-1

USN-5432-2

Produtos afetados

Alt Linux

Ubuntu

Libpng

Referências · 37

• 🔥 https://github.com/glennrp/libpng/issues/238 · Exploit
• 🔥 https://github.com/fouzhe/security/tree/master/libpng · Exploit
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-NJ21771.json · Nota
• https://suse.com/security/cve/CVE-2019-7317 · Nota
• https://suse.com/security/cve/CVE-2017-12652 · Nota
• https://suse.com/security/cve/CVE-2018-14048 · Nota
• http://packetstormsecurity.com/files/152561/Slackware-Security-Advisory-libpng-Updates.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-14048 · Nota de Segurança
• https://osv.dev/vulnerability/USN-5432-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2009-0040 · Nota
• https://osv.dev/vulnerability/CVE-2018-14550 · Nota
• https://cve.org/CVERecord?id=CVE-2018-14048 · Nota de Segurança
• https://security-tracker.debian.org/tracker/CVE-2018-14048 · Aviso do Fabricante
• https://osv.dev/vulnerability/ALPINE-CVE-2018-14048 · Aviso do Fabricante
• https://osv.dev/vulnerability/CLEANSTART-2026-NJ21771 · Aviso do Fabricante