CVE-2009-5063

Memory leak in the embedded_profile_len function in pngwutil.c in libpng before 1.2.39beta5 allows context-dependent attackers to cause a denial of service…

published August 31, 2011

CVSS
—
EPSS
1%
Percentile
74.0
In the wild
Unconfirmed
What it is

Memory leak in the embedded_profile_len function in pngwutil.c in libpng before 1.2.39beta5 allows context-dependent attackers to cause a denial of service (memory leak or segmentation fault) via a JPEG image containing an iCCP chunk with a negative embedded profile length. NOTE: this is due to an incomplete fix for CVE-2006-7244.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01496 · 74.0th percentile
Published
2011-08-31T23:00Z
EPSS history
Timeline
  • 31 AUG 23:00Z
    Memory leak in the embedded_profile_len function in pngwutil.c in libpng before 1.2.39beta5 allows context-dependent attackers to cause a denial of service…
    cvelistv5