PatchTheCVElibpng3 vulnerabilities and fixes
Recent CVEs affecting libpng3, with upgrade or downgrade steps. 2 tracked.
libpng3 has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2004-10-20. Highest priority: CVE-2002-0660 (score 53/100).
- CVE-2004-0768 HIGH 7.5 DOWNGRADE libpng 1.2.5 and earlier does not properly calculate certain buffer offsets, which could allow remote attacker
- CVE-2002-0660 HIGH 7.5 DOWNGRADE DOWNGRADE Buffer overflow in libpng 1.0.12-3.woody.2 and libpng3 1.2.1-1.1.woody.2 on Debian GNU/Linux 3.0, and other op
FAQ
How do I fix libpng3 vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is libpng3 being exploited right now?
None of the tracked libpng3 CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which libpng3 CVE should I patch first?
CVE-2002-0660 currently ranks highest (53/100): Buffer overflow in libpng 1.0.12-3.woody.2 and libpng3 1.2.1-1.1.woody.2 on Debian GNU/Linux 3.0, and other op.