What is CVE-2011-2692?

CVE-2011-2692 is a high-severity vulnerability in Libpng, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. CVSS score: 8.8/10. Published 2011-07-17.

How severe is CVE-2011-2692?

High severity. CVSS v3 base score is 8.8 out of 10.

Buffer overflow in Libpng

CVE-2011-2692

The png_handle_sCAL function in pngrutil.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 does not properly handle invalid sCAL chunks, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a crafted PNG image that triggers the reading of uninitialized memory.

Vulnerability class: Buffer Overflow

Published 2011-07-17 · last modified 2026-06-16.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

EPSS exploit prediction

EPSS: 0.042 (90.7th percentile), scored 2026-09-30.

Low probability of exploitation in the next 30 days, but still tracked. 91st percentile — 90.7% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.042 · newest: 0.042 · change: 0.000

Affected products

Libpng
Canonical Ubuntu Linux — versions 8.04, 10.04, 10.10
Debian Linux — versions 5.0, 6.0
Fedoraproject Fedora — versions 14

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

References

secunia.com/advisories/49660 (Broken Link, third-party-advisory)
www.redhat.com/support/errata/RHSA-2011-1103.html (vendor-advisory, Broken Link)
www.securityfocus.com/bid/48618 (VDB Entry, Third Party Advisory, vdb-entry)
secunia.com/advisories/45046 (Broken Link, third-party-advisory)
www.ubuntu.com/usn/USN-1175-1 (vendor-advisory, Third Party Advisory)
www.mandriva.com/security/advisories (vendor-advisory, Broken Link)
bugzilla.redhat.com/show_bug.cgi (Patch, Third Party Advisory, Issue Tracking)
sourceforge.net/mailarchive/forum.php (Exploit, Third Party Advisory, Issue Tracking)
security.gentoo.org/glsa/glsa-201206-15.xml (vendor-advisory, Third Party Advisory)
secunia.com/advisories/45461 (Broken Link, third-party-advisory)

Frequently asked questions

What is CVE-2011-2692?: CVE-2011-2692 is a high-severity vulnerability in Libpng, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. CVSS score: 8.8/10. Published 2011-07-17.
How severe is CVE-2011-2692?: High severity. CVSS v3 base score is 8.8 out of 10.