CVE-2015-8126High· 7.5▾ TwilightMultiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x before 1.5.24, and 1.6.x before 1.6.19 allow remote attackers t…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 41.3 · likelihood 2.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Oct 14.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
10%
Multiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x before 1.5.24, and 1.6.x before 1.6.19 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a small bit-depth value in an IHDR (aka image header) chunk in a PNG image.
libpng < 1.0.64libpng >= 1.1.1, < 1.2.54libpng >= 1.3.0, < 1.4.17libpng >= 1.5.0, < 1.5.24libpng >= 1.6.0, < 1.6.19fedora = 21fedora = 22fedora = 23leap = 42.1opensuse = 13.1opensuse = 13.2linux_enterprise_desktop = 11linux_enterprise_desktop = 12linux_enterprise_server = 12debian_linux = 7.0debian_linux = 8.0debian_linux = 9.0satellite = 5.7enterprise_linux_desktop = 6.0enterprise_linux_desktop = 7.0enterprise_linux_eus = 6.7enterprise_linux_eus = 7.2enterprise_linux_eus = 7.3enterprise_linux_eus = 7.4enterprise_linux_eus = 7.5enterprise_linux_eus = 7.6enterprise_linux_eus = 7.7enterprise_linux_server = 6.0enterprise_linux_server = 7.0enterprise_linux_server_aus = 7.2enterprise_linux_server_aus = 7.3enterprise_linux_server_aus = 7.4enterprise_linux_server_aus = 7.6enterprise_linux_server_aus = 7.7enterprise_linux_server_tus = 7.2enterprise_linux_server_tus = 7.3enterprise_linux_server_tus = 7.6enterprise_linux_server_tus = 7.7enterprise_linux_workstation = 6.0enterprise_linux_workstation = 7.0satellite = 5.6jdk = 1.6.0jdk = 1.7.0jdk = 1.8.0jre = 1.6.0jre = 1.7.0jre = 1.8.0linux = 6linux = 7solaris = 11.3mac_os_x < 10.11.4ubuntu_linux = 12.04ubuntu_linux = 14.04ubuntu_linux = 15.04ubuntu_linux = 15.10Upgrade past the affected range:
libpng 1.6.19mac_os_x 10.11.4Connected by shared product, vendor, weakness, or advisory.
CVE-2026-25646High· 8.1LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files
CVE-2025-14141High· 8.8A flaw has been found in UTT 进取 520W 1.7.7-180627
CVE-2025-14140Medium· 6.5A vulnerability was detected in UTT 进取 520W 1.7.7-180627
CVE-2025-14139Medium· 5.7A security vulnerability has been detected in UTT 进取 520W 1.7.7-180627
CVE-2025-14191High· 8.8A vulnerability has been found in UTT 进取 512W up to 1.7.7-171114
CVE-2021-42553Medium· 6.8A buffer overflow vulnerability in stm32_mw_usb_host of STMicroelectronics in versions before 3.5.1 allows an attacker to execute arbitrary code when the descriptor contains more endpoints than USBH_MAX_NUM_ENDPOINTS