PatchTheCVEcute png vulnerabilities and fixes
Recent CVEs affecting cute png, with upgrade or downgrade steps. 8 tracked.
Also searched as: cutepng.
cute png has 8 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2024-10-01. Highest priority: CVE-2024-46276 (score 42/100).
- CVE-2024-46276 HIGH 7.8 DOWNGRADE cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_chunk() function at cute_png.h.
- CVE-2024-46274 HIGH 7.8 DOWNGRADE cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_stored() function at cute_png.h.
- CVE-2024-46267 HIGH 7.8 DOWNGRADE cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_block() function at cute_png.h.
- CVE-2024-46264 HIGH 7.8 DOWNGRADE cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_find() function at cute_png.h.
- CVE-2024-46263 HIGH 7.8 DOWNGRADE cute_png v1.05 was discovered to contain a stack overflow via the cp_dynamic() function at cute_png.h.
- CVE-2024-46261 HIGH 7.8 DOWNGRADE cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_make32() function at cute_png.h.
- CVE-2024-46259 HIGH 7.8 DOWNGRADE cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_unfilter() function at cute_png.h.
- CVE-2024-46258 HIGH 7.8 DOWNGRADE cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_load_png_mem() function at cute_png
FAQ
How do I fix cute png vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is cute png being exploited right now?
None of the tracked cute png CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which cute png CVE should I patch first?
CVE-2024-46276 currently ranks highest (42/100): cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_chunk() function at cute_png.h..