| Package | Affected versions | Patched versions |
|---|---|---|
| libpng | = 0.89c= 0.95= 1.0.0= 1.0.1= 1.0.10= 1.0.11= 1.0.12= 1.0.13= 1.0.14= 1.0.15= 1.0.16= 1.0.17= 1.0.18= 1.0.19= 1.0.2= 1.0.20= 1.0.21= 1.0.22= 1.0.23= 1.0.7= 1.0.8= 1.0.9= 1.2.0= 1.2.1= 1.2.10= 1.2.11= 1.2.13= 1.2.14= 1.2.15= 1.2.16= 1.2.17= 1.2.18= 1.2.19= 1.2.2= 1.2.20= 1.2.21= 1.2.22= 1.2.23= 1.2.24= 1.2.25= 1.2.26= 1.2.3= 1.2.30= 1.2.31= 1.2.33= 1.2.34≤ 1.2.35 |
libpng before 1.2.37 does not properly parse 1-bit interlaced images with width values that are not divisible by 8, which causes libpng to include uninitialized bits in certain rows of a PNG file and might allow remote attackers to read portions of sensitive memory via "out-of-bounds pixels" in the file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free