CVE-2011-2691

The png_err function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 makes a function call using a…

published July 17, 2011

CVSS
—
EPSS
4%
Percentile
90.1
In the wild
Unconfirmed
What it is

The png_err function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 makes a function call using a NULL pointer argument instead of an empty-string argument, which allows remote attackers to cause a denial of service (application crash) via a crafted PNG image.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03861 · 90.1th percentile
Published
2011-07-17T20:00Z
EPSS history
Timeline
  • 17 JUL 20:00Z
    The png_err function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 makes a function call using a…
    cvelistv5