{"id":"CVE-2015-8126","title":"Multiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x before 1.5.24, and 1.6.x before 1.6.19 allow remote attackers t…","summary":"Multiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x before 1.5.24, and 1.6.x before 1.6.19 allow remote attackers t…","severity":"high","cvss":7.5,"cvssVector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","cwe":["CWE-120"],"vendor":"libpng","product":"libpng","affected":["libpng < 1.0.64","libpng >= 1.1.1, < 1.2.54","libpng >= 1.3.0, < 1.4.17","libpng >= 1.5.0, < 1.5.24","libpng >= 1.6.0, < 1.6.19","fedora = 21","fedora = 22","fedora = 23","leap = 42.1","opensuse = 13.1","opensuse = 13.2","linux_enterprise_desktop = 11","linux_enterprise_desktop = 12","linux_enterprise_server = 12","debian_linux = 7.0","debian_linux = 8.0","debian_linux = 9.0","satellite = 5.7","enterprise_linux_desktop = 6.0","enterprise_linux_desktop = 7.0","enterprise_linux_eus = 6.7","enterprise_linux_eus = 7.2","enterprise_linux_eus = 7.3","enterprise_linux_eus = 7.4","enterprise_linux_eus = 7.5","enterprise_linux_eus = 7.6","enterprise_linux_eus = 7.7","enterprise_linux_server = 6.0","enterprise_linux_server = 7.0","enterprise_linux_server_aus = 7.2","enterprise_linux_server_aus = 7.3","enterprise_linux_server_aus = 7.4","enterprise_linux_server_aus = 7.6","enterprise_linux_server_aus = 7.7","enterprise_linux_server_tus = 7.2","enterprise_linux_server_tus = 7.3","enterprise_linux_server_tus = 7.6","enterprise_linux_server_tus = 7.7","enterprise_linux_workstation = 6.0","enterprise_linux_workstation = 7.0","satellite = 5.6","jdk = 1.6.0","jdk = 1.7.0","jdk = 1.8.0","jre = 1.6.0","jre = 1.7.0","jre = 1.8.0","linux = 6","linux = 7","solaris = 11.3","mac_os_x < 10.11.4","ubuntu_linux = 12.04","ubuntu_linux = 14.04","ubuntu_linux = 15.04","ubuntu_linux = 15.10"],"patched":["libpng 1.6.19","mac_os_x 10.11.4"],"published":"2015-11-13","updated":"2026-10-14","sourceUpdated":"2026-10-14T22:17:14.610","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2015-8126","references":[{"url":"http://googlechromereleases.blogspot.com/2016/03/stable-channel-update.html","label":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html","label":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172324.html","label":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172620.html","label":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172647.html","label":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172663.html","label":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172769.html","label":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172797.html","label":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172823.html","label":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177344.html","label":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177382.html","label":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174905.html","label":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174936.html","label":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175073.html","label":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00033.html","label":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00034.html","label":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00038.html","label":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00041.html","label":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00042.html","label":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00043.html","label":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00044.html","label":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html","label":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00047.html","label":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00048.html","label":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00014.html","label":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00015.html","label":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00018.html","label":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00028.html","label":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2015-11/msg00159.html","label":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2015-11/msg00160.html","label":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2015-12/msg00062.html","label":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2015-12/msg00063.html","label":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-01/msg00028.html","label":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-01/msg00029.html","label":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-01/msg00030.html","label":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-2594.html","label":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-2595.html","label":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-2596.html","label":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0055.html","label":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0056.html","label":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0057.html","label":"cve@mitre.org"},{"url":"http://www.debian.org/security/2015/dsa-3399","label":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3507","label":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2015/11/12/2","label":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","label":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html","label":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html","label":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/77568","label":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1034142","label":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2815-1","label":"cve@mitre.org"},{"url":"https://access.redhat.com/errata/RHSA-2016:1430","label":"cve@mitre.org"},{"url":"https://code.google.com/p/chromium/issues/detail?id=560291","label":"cve@mitre.org"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10148","label":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201603-09","label":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201611-08","label":"cve@mitre.org"},{"url":"https://support.apple.com/HT206167","label":"cve@mitre.org"},{"url":"http://googlechromereleases.blogspot.com/2016/03/stable-channel-update.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172324.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172620.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172647.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172663.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172769.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172797.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172823.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177344.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177382.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174905.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174936.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175073.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00033.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00034.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00038.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00041.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00042.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00043.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00044.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00047.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00048.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00014.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00015.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00018.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00028.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2015-11/msg00159.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2015-11/msg00160.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2015-12/msg00062.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2015-12/msg00063.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-01/msg00028.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-01/msg00029.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-01/msg00030.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-2594.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-2595.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-2596.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0055.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0056.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0057.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2015/dsa-3399","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3507","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2015/11/12/2","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/77568","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034142","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2815-1","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2016:1430","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.google.com/p/chromium/issues/detail?id=560291","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10148","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201603-09","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201611-08","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT206167","label":"af854a3a-2127-422b-91ae-364da2661108"}],"tags":["nvd","cve.org"],"epss":0.10339,"epssPercentile":0.95685,"ingestedAt":"2026-10-14T23:00:01.996Z","ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-10-14T21:33:33.081299Z"},"slug":"CVE-2015-8126","body":"## Overview\n\nMultiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x before 1.5.24, and 1.6.x before 1.6.19 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a small bit-depth value in an IHDR (aka image header) chunk in a PNG image.\n\n## Affected\n\n- `libpng < 1.0.64`\n- `libpng >= 1.1.1, < 1.2.54`\n- `libpng >= 1.3.0, < 1.4.17`\n- `libpng >= 1.5.0, < 1.5.24`\n- `libpng >= 1.6.0, < 1.6.19`\n- `fedora = 21`\n- `fedora = 22`\n- `fedora = 23`\n- `leap = 42.1`\n- `opensuse = 13.1`\n- `opensuse = 13.2`\n- `linux_enterprise_desktop = 11`\n- `linux_enterprise_desktop = 12`\n- `linux_enterprise_server = 12`\n- `debian_linux = 7.0`\n- `debian_linux = 8.0`\n- `debian_linux = 9.0`\n- `satellite = 5.7`\n- `enterprise_linux_desktop = 6.0`\n- `enterprise_linux_desktop = 7.0`\n- `enterprise_linux_eus = 6.7`\n- `enterprise_linux_eus = 7.2`\n- `enterprise_linux_eus = 7.3`\n- `enterprise_linux_eus = 7.4`\n- `enterprise_linux_eus = 7.5`\n- `enterprise_linux_eus = 7.6`\n- `enterprise_linux_eus = 7.7`\n- `enterprise_linux_server = 6.0`\n- `enterprise_linux_server = 7.0`\n- `enterprise_linux_server_aus = 7.2`\n- `enterprise_linux_server_aus = 7.3`\n- `enterprise_linux_server_aus = 7.4`\n- `enterprise_linux_server_aus = 7.6`\n- `enterprise_linux_server_aus = 7.7`\n- `enterprise_linux_server_tus = 7.2`\n- `enterprise_linux_server_tus = 7.3`\n- `enterprise_linux_server_tus = 7.6`\n- `enterprise_linux_server_tus = 7.7`\n- `enterprise_linux_workstation = 6.0`\n- `enterprise_linux_workstation = 7.0`\n- `satellite = 5.6`\n- `jdk = 1.6.0`\n- `jdk = 1.7.0`\n- `jdk = 1.8.0`\n- `jre = 1.6.0`\n- `jre = 1.7.0`\n- `jre = 1.8.0`\n- `linux = 6`\n- `linux = 7`\n- `solaris = 11.3`\n- `mac_os_x < 10.11.4`\n- `ubuntu_linux = 12.04`\n- `ubuntu_linux = 14.04`\n- `ubuntu_linux = 15.04`\n- `ubuntu_linux = 15.10`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `libpng 1.6.19`\n- `mac_os_x 10.11.4`","depth":"twilight","depthScore":43,"depthScoreParts":{"impact":41.3,"likelihood":2.1,"exploitation":0,"ransomware":0},"changes":[]}