PT-2018-12302 · Png Development+2 · Libpng+2

Ax3L + 1 · Published 2018-07-13 · Updated 2026-04-14 · CVE-2018-14048

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions libpng version 1.6.34

Description The issue is related to a SEGV in the function png free data in png.c, which is connected to the recommended error handling for png read image.

Recommendations For libpng version 1.6.34, consider applying the recommended error handling for png read image to prevent the SEGV in the png free data function. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

ALT-PU-2018-2451

ALT-PU-2019-2547

CLEANSTART-2026-NJ21771

CVE-2018-14048

OPENSUSE-SU-2024:10972-1

USN-5432-1

USN-5432-2

Affected Products

Alt Linux

Ubuntu

Libpng

References · 37

• 🔥 https://github.com/glennrp/libpng/issues/238 · Exploit
• 🔥 https://github.com/fouzhe/security/tree/master/libpng · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-14048 · Security Note
• https://osv.dev/vulnerability/USN-5432-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2018-14048 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2018-14048 · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2018-14048 · Vendor Advisory
• https://osv.dev/vulnerability/CLEANSTART-2026-NJ21771 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-14048 · Vendor Advisory
• https://security.gentoo.org/glsa/201908-02 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-14048 · Vendor Advisory
• http://oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2018-14550 · Security Note
• https://ubuntu.com/security/notices/USN-5432-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-14048 · Vendor Advisory