Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2013-6954
6.5
MEDIUMCVSS v3
Severity scale
010
Description
The png_do_expand_palette function in libpng before 1.6.8 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via (1) a PLTE chunk of zero bytes or (2) a NULL palette, related to pngrtran.c and pngset.c.
pnggroup/libpng
GitHubLIBPNG: Portable Network Graphics support, official libpng repository
GitHubLIBPNG: Portable Network Graphics support, official libpng repository= 1.6.0, = 1.6.1, = 1.6.3, = 1.6.4, = 1.6.7, = 1.6.6, = 1.6.5, = 1.6.2, <= 1.6.8NVD