libpng 1.6.36

CPE Details

libpng 1.6.36
1.6.36
2019-01-30
18h32 +00:00
2019-01-30
18h32 +00:00
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:libpng:libpng:1.6.36:*:*:*:*:*:*:*

Informations

Vendor

libpng

Product

libpng

Version

1.6.36

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2019-7317 2019-02-04 06h00 +00:00 png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.
5.3
Medium
CVE-2019-6129 2019-01-11 04h00 +00:00 png_create_info_struct in png.c in libpng 1.6.36 has a memory leak, as demonstrated by pngcp. NOTE: a third party has stated "I don't think it is libpng's job to free this buffer.
6.5
Medium