CVE-2015-0973

HIGH 8.8CVE-2015-0973 · Published 18/01/2015 · updated 17/06/2026

In short

CVE-2015-0973 is a HIGH (CVSS 8.8) vulnerability affecting libpng (libpng).
Chance of exploitation in the next 30 days (EPSS): 4.1%, higher than 90.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
libpng libpng	`= 1.6.0= 1.6.1= 1.6.10= 1.6.11= 1.6.12= 1.6.13= 1.6.14= 1.6.15= 1.6.2= 1.6.3= 1.6.4= 1.6.5= 1.6.6= 1.6.7= 1.6.8= 1.6.9≤ 1.5.20`	No fix yet

Description

Buffer overflow in the png_read_IDAT_data function in pngrutil.c in libpng before 1.5.21 and 1.6.x before 1.6.16 allows context-dependent attackers to execute arbitrary code via IDAT data with a large width, a different vulnerability than CVE-2014-9495.

References

lists.apple.com/archives/security-announce/2016/Mar/msg00004.html · Vendor Advisory
secunia.com/advisories/62725 · Permissions Required
sourceforge.net/p/png-mng/mailman/message/33173461 · Third Party Advisory
tfpwn.com/files/libpng_heap_overflow_1.6.15.txt · Exploit
openwall.com/lists/oss-security/2015/01/10/1 · Exploit
openwall.com/lists/oss-security/2015/01/10/3 · Exploit
oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html · Third Party Advisory
security.netapp.com/advisory/ntap-20240719-0005
support.apple.com/HT206167 · Vendor Advisory

More vulnerabilities in libpng

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

libpng

= 1.6.0= 1.6.1= 1.6.10= 1.6.11= 1.6.12= 1.6.13= 1.6.14= 1.6.15= 1.6.2= 1.6.3= 1.6.4= 1.6.5= 1.6.6= 1.6.7= 1.6.8= 1.6.9≤ 1.5.20

No fix yet

More vulnerabilities in libpng

See all →