CVE-2019-6129

png_create_info_struct in png.c in libpng 1.6.36 has a memory leak, as demonstrated by pngcp

Medium · published January 11, 2019

CVSS v3.1
6.5
EPSS
2%
Percentile
75.7
In the wild
Unconfirmed
What it is

png_create_info_struct in png.c in libpng 1.6.36 has a memory leak, as demonstrated by pngcp. NOTE: a third party has stated "I don't think it is libpng's job to free this buffer.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.01609 · 75.7th percentile
Published
2019-01-11T05:00Z
EPSS history
Timeline
  • 11 JAN 05:00Z
    png_create_info_struct in png.c in libpng 1.6.36 has a memory leak, as demonstrated by pngcp
    cvelistv5