CVE-2012-3425

The png_push_read_zTXt function in pngpread.c in libpng 1.0.x before 1.0.58, 1.2.x before 1.2.48, 1.4.x before 1.4.10, and 1.5.x before 1.5.10 allows remote…

published August 13, 2012

CVSS
—
EPSS
3%
Percentile
88.6
In the wild
Unconfirmed
What it is

The png_push_read_zTXt function in pngpread.c in libpng 1.0.x before 1.0.58, 1.2.x before 1.2.48, 1.4.x before 1.4.10, and 1.5.x before 1.5.10 allows remote attackers to cause a denial of service (out-of-bounds read) via a large avail_in field value in a PNG image.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03357 · 88.6th percentile
Published
2012-08-13T20:00Z
EPSS history
Timeline
  • 13 AUG 20:00Z
    The png_push_read_zTXt function in pngpread.c in libpng 1.0.x before 1.0.58, 1.2.x before 1.2.48, 1.4.x before 1.4.10, and 1.5.x before 1.5.10 allows remote…
    cvelistv5