Vulnerability in Libpng

CVE-2006-7244

Memory leak in pngwutil.c in libpng 1.2.13beta1, and other versions before 1.2.15beta3, allows context-dependent attackers to cause a denial of service (memory leak or segmentation fault) via a JPEG image containing an iCCP chunk with a negative embedded profile length.

EPSS: 0.012 (66.1th percentile) — read the EPSS interpretation.

Affected products

  • Libpng — versions 1.0.0, 1.0.1, 1.0.2
  • N/a — versions n/a

Weakness classification (CWE)

References