Read the docs
TI-2011-02686 Aliases CVE-2011-3048GHSA-mmpj-hr4h-5g99

The png_set_text_2 function in pngset.c in libpng 1.0.x before 1.0.59, 1.2.x before…

Priority LOW 39CWE-119Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
Code execution
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
Partial Red Hat: 11 fixed, 1 without a fix

Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-119 and the CVSS impact.

Summary

The png_set_text_2 function in pngset.c in libpng 1.0.x before 1.0.59, 1.2.x before 1.2.49, 1.4.x before 1.4.11, and 1.5.x before 1.5.10 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted text chunk in a PNG image file, which triggers a memory allocation failure that is not properly handled, leading to a heap-based buffer overflow.

Why it matters now

EPSS 0.0652 93rd percentileScored 2026-11-07
Fix Partial Red Hat: 1 advisoryRed Hat: 11 fixed, 1 without a fix

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 143

CPEVersionsRoleVendor
cpe:2.3:a:libpng:libpng:1.0.0:*:*:*:*:*:*:*1.0.0Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.0.1:*:*:*:*:*:*:*1.0.1Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.0.2:*:*:*:*:*:*:*1.0.2Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.0.3:*:*:*:*:*:*:*1.0.3Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.0.5:*:*:*:*:*:*:*1.0.5Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.0.6:*:*:*:*:*:*:*1.0.6Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.0.7:*:*:*:*:*:*:*1.0.7Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.0.8:*:*:*:*:*:*:*1.0.8Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.0.9:*:*:*:*:*:*:*1.0.9Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.0.10:*:*:*:*:*:*:*1.0.10Vulnerablepnggroup
  • cpe:2.3:a:libpng:libpng:1.0.0:*:*:*:*:*:*:* Versions 1.0.0 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.0.1:*:*:*:*:*:*:* Versions 1.0.1 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.0.2:*:*:*:*:*:*:* Versions 1.0.2 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.0.3:*:*:*:*:*:*:* Versions 1.0.3 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.0.5:*:*:*:*:*:*:* Versions 1.0.5 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.0.6:*:*:*:*:*:*:* Versions 1.0.6 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.0.7:*:*:*:*:*:*:* Versions 1.0.7 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.0.8:*:*:*:*:*:*:* Versions 1.0.8 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.0.9:*:*:*:*:*:*:* Versions 1.0.9 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.0.10:*:*:*:*:*:*:* Versions 1.0.10 Vulnerable ·pnggroup
Show 133 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:libpng:libpng:1.0.11:*:*:*:*:*:*:*1.0.11Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.0.12:*:*:*:*:*:*:*1.0.12Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.0.13:*:*:*:*:*:*:*1.0.13Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.0.14:*:*:*:*:*:*:*1.0.14Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.0.15:*:*:*:*:*:*:*1.0.15Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.0.16:*:*:*:*:*:*:*1.0.16Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.0.17:*:*:*:*:*:*:*1.0.17Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.0.18:*:*:*:*:*:*:*1.0.18Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.0.19:*:*:*:*:*:*:*1.0.19Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.0.20:*:*:*:*:*:*:*1.0.20Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.0.21:*:*:*:*:*:*:*1.0.21Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.0.22:*:*:*:*:*:*:*1.0.22Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.0.23:*:*:*:*:*:*:*1.0.23Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.0.24:*:*:*:*:*:*:*1.0.24Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.0.25:*:*:*:*:*:*:*1.0.25Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.0.26:*:*:*:*:*:*:*1.0.26Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.0.27:*:*:*:*:*:*:*1.0.27Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.0.28:*:*:*:*:*:*:*1.0.28Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.0.29:*:*:*:*:*:*:*1.0.29Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.0.30:*:*:*:*:*:*:*1.0.30Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.0.31:*:*:*:*:*:*:*1.0.31Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.0.32:*:*:*:*:*:*:*1.0.32Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.0.33:*:*:*:*:*:*:*1.0.33Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.0.34:*:*:*:*:*:*:*1.0.34Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.0.35:*:*:*:*:*:*:*1.0.35Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.0.37:*:*:*:*:*:*:*1.0.37Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.0.38:*:*:*:*:*:*:*1.0.38Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.0.39:*:*:*:*:*:*:*1.0.39Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.0.40:*:*:*:*:*:*:*1.0.40Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.0.41:*:*:*:*:*:*:*1.0.41Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.0.42:*:*:*:*:*:*:*1.0.42Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.0.43:*:*:*:*:*:*:*1.0.43Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.0.44:*:*:*:*:*:*:*1.0.44Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.0.45:*:*:*:*:*:*:*1.0.45Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.0.46:*:*:*:*:*:*:*1.0.46Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.0.47:*:*:*:*:*:*:*1.0.47Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.0.48:*:*:*:*:*:*:*1.0.48Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.0.50:*:*:*:*:*:*:*1.0.50Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.0.51:*:*:*:*:*:*:*1.0.51Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.0.52:*:*:*:*:*:*:*1.0.52Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.0.53:*:*:*:*:*:*:*1.0.53Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.0.54:*:*:*:*:*:*:*1.0.54Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.0.55:*:*:*:*:*:*:*1.0.55Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.0.55:rc01:*:*:*:*:*:*1.0.55 rc01Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.0.56:*:*:*:*:*:*:*1.0.56Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.0.56:devel:*:*:*:*:*:*1.0.56 develVulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.0.57:*:*:*:*:*:*:*1.0.57Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.0.57:rc01:*:*:*:*:*:*1.0.57 rc01Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.0.58:*:*:*:*:*:*:*1.0.58Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.0:*:*:*:*:*:*:*1.2.0Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.1:*:*:*:*:*:*:*1.2.1Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.2:*:*:*:*:*:*:*1.2.2Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.3:*:*:*:*:*:*:*1.2.3Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.4:*:*:*:*:*:*:*1.2.4Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.5:*:*:*:*:*:*:*1.2.5Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.6:*:*:*:*:*:*:*1.2.6Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.7:*:*:*:*:*:*:*1.2.7Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.8:*:*:*:*:*:*:*1.2.8Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.9:*:*:*:*:*:*:*1.2.9Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.10:*:*:*:*:*:*:*1.2.10Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.11:*:*:*:*:*:*:*1.2.11Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.12:*:*:*:*:*:*:*1.2.12Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.13:*:*:*:*:*:*:*1.2.13Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.14:*:*:*:*:*:*:*1.2.14Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.15:*:*:*:*:*:*:*1.2.15Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.16:*:*:*:*:*:*:*1.2.16Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.17:*:*:*:*:*:*:*1.2.17Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.18:*:*:*:*:*:*:*1.2.18Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.19:*:*:*:*:*:*:*1.2.19Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.20:*:*:*:*:*:*:*1.2.20Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.21:*:*:*:*:*:*:*1.2.21Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.22:*:*:*:*:*:*:*1.2.22Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.23:*:*:*:*:*:*:*1.2.23Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.24:*:*:*:*:*:*:*1.2.24Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.25:*:*:*:*:*:*:*1.2.25Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.26:*:*:*:*:*:*:*1.2.26Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.27:*:*:*:*:*:*:*1.2.27Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.28:*:*:*:*:*:*:*1.2.28Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.29:*:*:*:*:*:*:*1.2.29Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.30:*:*:*:*:*:*:*1.2.30Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.31:*:*:*:*:*:*:*1.2.31Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.32:*:*:*:*:*:*:*1.2.32Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.33:*:*:*:*:*:*:*1.2.33Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.34:*:*:*:*:*:*:*1.2.34Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.35:*:*:*:*:*:*:*1.2.35Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.36:*:*:*:*:*:*:*1.2.36Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.37:*:*:*:*:*:*:*1.2.37Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.38:*:*:*:*:*:*:*1.2.38Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.39:*:*:*:*:*:*:*1.2.39Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.40:*:*:*:*:*:*:*1.2.40Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.41:*:*:*:*:*:*:*1.2.41Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.42:*:*:*:*:*:*:*1.2.42Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.43:*:*:*:*:*:*:*1.2.43Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.43:devel:*:*:*:*:*:*1.2.43 develVulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.44:*:*:*:*:*:*:*1.2.44Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.45:*:*:*:*:*:*:*1.2.45Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.45:devel:*:*:*:*:*:*1.2.45 develVulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.46:*:*:*:*:*:*:*1.2.46Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.46:devel:*:*:*:*:*:*1.2.46 develVulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.47:*:*:*:*:*:*:*1.2.47Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.47:beta:*:*:*:*:*:*1.2.47 betaVulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.48:*:*:*:*:*:*:*1.2.48Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.48:betas:*:*:*:*:*:*1.2.48 betasVulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.4.0:*:*:*:*:*:*:*1.4.0Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.4.1:*:*:*:*:*:*:*1.4.1Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.4.2:*:*:*:*:*:*:*1.4.2Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.4.3:*:*:*:*:*:*:*1.4.3Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.4.4:*:*:*:*:*:*:*1.4.4Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.4.5:*:*:*:*:*:*:*1.4.5Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.4.6:*:*:*:*:*:*:*1.4.6Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.4.7:*:*:*:*:*:*:*1.4.7Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.4.8:*:*:*:*:*:*:*1.4.8Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.4.9:*:*:*:*:*:*:*1.4.9Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.4.10:*:*:*:*:*:*:*1.4.10Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.5.0:beta:*:*:*:*:*:*1.5.0 betaVulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.5.1:*:*:*:*:*:*:*1.5.1Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.5.1:beta:*:*:*:*:*:*1.5.1 betaVulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.5.2:*:*:*:*:*:*:*1.5.2Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.5.2:beta:*:*:*:*:*:*1.5.2 betaVulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.5.3:beta:*:*:*:*:*:*1.5.3 betaVulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.5.4:*:*:*:*:*:*:*1.5.4Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.5.4:beta:*:*:*:*:*:*1.5.4 betaVulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.5.5:*:*:*:*:*:*:*1.5.5Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.5.5:beta:*:*:*:*:*:*1.5.5 betaVulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.5.6:*:*:*:*:*:*:*1.5.6Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.5.6:beta:*:*:*:*:*:*1.5.6 betaVulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.5.7:*:*:*:*:*:*:*1.5.7Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.5.7:beta:*:*:*:*:*:*1.5.7 betaVulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.5.8:*:*:*:*:*:*:*1.5.8Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.5.8:beta:*:*:*:*:*:*1.5.8 betaVulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.5.9:*:*:*:*:*:*:*1.5.9Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.5.9:beta:*:*:*:*:*:*1.5.9 betaVulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.5.10:beta:*:*:*:*:*:*1.5.10 betaVulnerablepnggroup
  • cpe:2.3:a:libpng:libpng:1.0.11:*:*:*:*:*:*:* Versions 1.0.11 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.0.12:*:*:*:*:*:*:* Versions 1.0.12 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.0.13:*:*:*:*:*:*:* Versions 1.0.13 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.0.14:*:*:*:*:*:*:* Versions 1.0.14 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.0.15:*:*:*:*:*:*:* Versions 1.0.15 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.0.16:*:*:*:*:*:*:* Versions 1.0.16 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.0.17:*:*:*:*:*:*:* Versions 1.0.17 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.0.18:*:*:*:*:*:*:* Versions 1.0.18 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.0.19:*:*:*:*:*:*:* Versions 1.0.19 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.0.20:*:*:*:*:*:*:* Versions 1.0.20 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.0.21:*:*:*:*:*:*:* Versions 1.0.21 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.0.22:*:*:*:*:*:*:* Versions 1.0.22 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.0.23:*:*:*:*:*:*:* Versions 1.0.23 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.0.24:*:*:*:*:*:*:* Versions 1.0.24 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.0.25:*:*:*:*:*:*:* Versions 1.0.25 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.0.26:*:*:*:*:*:*:* Versions 1.0.26 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.0.27:*:*:*:*:*:*:* Versions 1.0.27 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.0.28:*:*:*:*:*:*:* Versions 1.0.28 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.0.29:*:*:*:*:*:*:* Versions 1.0.29 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.0.30:*:*:*:*:*:*:* Versions 1.0.30 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.0.31:*:*:*:*:*:*:* Versions 1.0.31 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.0.32:*:*:*:*:*:*:* Versions 1.0.32 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.0.33:*:*:*:*:*:*:* Versions 1.0.33 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.0.34:*:*:*:*:*:*:* Versions 1.0.34 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.0.35:*:*:*:*:*:*:* Versions 1.0.35 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.0.37:*:*:*:*:*:*:* Versions 1.0.37 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.0.38:*:*:*:*:*:*:* Versions 1.0.38 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.0.39:*:*:*:*:*:*:* Versions 1.0.39 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.0.40:*:*:*:*:*:*:* Versions 1.0.40 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.0.41:*:*:*:*:*:*:* Versions 1.0.41 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.0.42:*:*:*:*:*:*:* Versions 1.0.42 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.0.43:*:*:*:*:*:*:* Versions 1.0.43 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.0.44:*:*:*:*:*:*:* Versions 1.0.44 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.0.45:*:*:*:*:*:*:* Versions 1.0.45 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.0.46:*:*:*:*:*:*:* Versions 1.0.46 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.0.47:*:*:*:*:*:*:* Versions 1.0.47 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.0.48:*:*:*:*:*:*:* Versions 1.0.48 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.0.50:*:*:*:*:*:*:* Versions 1.0.50 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.0.51:*:*:*:*:*:*:* Versions 1.0.51 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.0.52:*:*:*:*:*:*:* Versions 1.0.52 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.0.53:*:*:*:*:*:*:* Versions 1.0.53 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.0.54:*:*:*:*:*:*:* Versions 1.0.54 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.0.55:*:*:*:*:*:*:* Versions 1.0.55 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.0.55:rc01:*:*:*:*:*:* Versions 1.0.55 rc01 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.0.56:*:*:*:*:*:*:* Versions 1.0.56 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.0.56:devel:*:*:*:*:*:* Versions 1.0.56 devel Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.0.57:*:*:*:*:*:*:* Versions 1.0.57 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.0.57:rc01:*:*:*:*:*:* Versions 1.0.57 rc01 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.0.58:*:*:*:*:*:*:* Versions 1.0.58 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.0:*:*:*:*:*:*:* Versions 1.2.0 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.1:*:*:*:*:*:*:* Versions 1.2.1 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.2:*:*:*:*:*:*:* Versions 1.2.2 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.3:*:*:*:*:*:*:* Versions 1.2.3 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.4:*:*:*:*:*:*:* Versions 1.2.4 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.5:*:*:*:*:*:*:* Versions 1.2.5 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.6:*:*:*:*:*:*:* Versions 1.2.6 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.7:*:*:*:*:*:*:* Versions 1.2.7 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.8:*:*:*:*:*:*:* Versions 1.2.8 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.9:*:*:*:*:*:*:* Versions 1.2.9 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.10:*:*:*:*:*:*:* Versions 1.2.10 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.11:*:*:*:*:*:*:* Versions 1.2.11 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.12:*:*:*:*:*:*:* Versions 1.2.12 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.13:*:*:*:*:*:*:* Versions 1.2.13 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.14:*:*:*:*:*:*:* Versions 1.2.14 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.15:*:*:*:*:*:*:* Versions 1.2.15 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.16:*:*:*:*:*:*:* Versions 1.2.16 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.17:*:*:*:*:*:*:* Versions 1.2.17 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.18:*:*:*:*:*:*:* Versions 1.2.18 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.19:*:*:*:*:*:*:* Versions 1.2.19 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.20:*:*:*:*:*:*:* Versions 1.2.20 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.21:*:*:*:*:*:*:* Versions 1.2.21 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.22:*:*:*:*:*:*:* Versions 1.2.22 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.23:*:*:*:*:*:*:* Versions 1.2.23 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.24:*:*:*:*:*:*:* Versions 1.2.24 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.25:*:*:*:*:*:*:* Versions 1.2.25 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.26:*:*:*:*:*:*:* Versions 1.2.26 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.27:*:*:*:*:*:*:* Versions 1.2.27 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.28:*:*:*:*:*:*:* Versions 1.2.28 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.29:*:*:*:*:*:*:* Versions 1.2.29 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.30:*:*:*:*:*:*:* Versions 1.2.30 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.31:*:*:*:*:*:*:* Versions 1.2.31 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.32:*:*:*:*:*:*:* Versions 1.2.32 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.33:*:*:*:*:*:*:* Versions 1.2.33 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.34:*:*:*:*:*:*:* Versions 1.2.34 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.35:*:*:*:*:*:*:* Versions 1.2.35 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.36:*:*:*:*:*:*:* Versions 1.2.36 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.37:*:*:*:*:*:*:* Versions 1.2.37 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.38:*:*:*:*:*:*:* Versions 1.2.38 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.39:*:*:*:*:*:*:* Versions 1.2.39 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.40:*:*:*:*:*:*:* Versions 1.2.40 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.41:*:*:*:*:*:*:* Versions 1.2.41 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.42:*:*:*:*:*:*:* Versions 1.2.42 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.43:*:*:*:*:*:*:* Versions 1.2.43 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.43:devel:*:*:*:*:*:* Versions 1.2.43 devel Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.44:*:*:*:*:*:*:* Versions 1.2.44 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.45:*:*:*:*:*:*:* Versions 1.2.45 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.45:devel:*:*:*:*:*:* Versions 1.2.45 devel Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.46:*:*:*:*:*:*:* Versions 1.2.46 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.46:devel:*:*:*:*:*:* Versions 1.2.46 devel Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.47:*:*:*:*:*:*:* Versions 1.2.47 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.47:beta:*:*:*:*:*:* Versions 1.2.47 beta Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.48:*:*:*:*:*:*:* Versions 1.2.48 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.48:betas:*:*:*:*:*:* Versions 1.2.48 betas Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.4.0:*:*:*:*:*:*:* Versions 1.4.0 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.4.1:*:*:*:*:*:*:* Versions 1.4.1 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.4.2:*:*:*:*:*:*:* Versions 1.4.2 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.4.3:*:*:*:*:*:*:* Versions 1.4.3 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.4.4:*:*:*:*:*:*:* Versions 1.4.4 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.4.5:*:*:*:*:*:*:* Versions 1.4.5 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.4.6:*:*:*:*:*:*:* Versions 1.4.6 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.4.7:*:*:*:*:*:*:* Versions 1.4.7 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.4.8:*:*:*:*:*:*:* Versions 1.4.8 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.4.9:*:*:*:*:*:*:* Versions 1.4.9 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.4.10:*:*:*:*:*:*:* Versions 1.4.10 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.5.0:beta:*:*:*:*:*:* Versions 1.5.0 beta Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.5.1:*:*:*:*:*:*:* Versions 1.5.1 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.5.1:beta:*:*:*:*:*:* Versions 1.5.1 beta Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.5.2:*:*:*:*:*:*:* Versions 1.5.2 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.5.2:beta:*:*:*:*:*:* Versions 1.5.2 beta Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.5.3:beta:*:*:*:*:*:* Versions 1.5.3 beta Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.5.4:*:*:*:*:*:*:* Versions 1.5.4 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.5.4:beta:*:*:*:*:*:* Versions 1.5.4 beta Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.5.5:*:*:*:*:*:*:* Versions 1.5.5 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.5.5:beta:*:*:*:*:*:* Versions 1.5.5 beta Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.5.6:*:*:*:*:*:*:* Versions 1.5.6 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.5.6:beta:*:*:*:*:*:* Versions 1.5.6 beta Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.5.7:*:*:*:*:*:*:* Versions 1.5.7 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.5.7:beta:*:*:*:*:*:* Versions 1.5.7 beta Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.5.8:*:*:*:*:*:*:* Versions 1.5.8 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.5.8:beta:*:*:*:*:*:* Versions 1.5.8 beta Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.5.9:*:*:*:*:*:*:* Versions 1.5.9 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.5.9:beta:*:*:*:*:*:* Versions 1.5.9 beta Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.5.10:beta:*:*:*:*:*:* Versions 1.5.10 beta Vulnerable ·pnggroup

Remediation

Red Hat 1 advisory

  • RHSA-2012:0523 Released 2012-04-25 · Red Hat rating Moderate
    libpng security update
    • RHEL Desktop Workstation (v. 5 client) libpng-2:1.2.10-17.el5_8, libpng-devel-2:1.2.10-17.el5_8, libpng-devel-2:1.2.10-17.el5_8.i386
    • Red Hat Enterprise Linux (v. 5 server) libpng-2:1.2.10-17.el5_8, libpng-2:1.2.10-17.el5_8.i386, libpng-2:1.2.10-17.el5_8.ia64 +5
    • Red Hat Enterprise Linux Desktop (v. 5 client) libpng-2:1.2.10-17.el5_8, libpng-2:1.2.10-17.el5_8.i386
    • Red Hat Enterprise Linux Desktop (v. 6) libpng-2:1.2.49-1.el6_2
    • Red Hat Enterprise Linux Desktop Optional (v. 6) libpng-2:1.2.49-1.el6_2, libpng-devel-2:1.2.49-1.el6_2, libpng-static-2:1.2.49-1.el6_2
    • Red Hat Enterprise Linux HPC Node (v. 6) libpng-2:1.2.49-1.el6_2
    • Red Hat Enterprise Linux HPC Node Optional (v. 6) libpng-2:1.2.49-1.el6_2, libpng-devel-2:1.2.49-1.el6_2, libpng-static-2:1.2.49-1.el6_2
    • Red Hat Enterprise Linux Server (v. 6) libpng-2:1.2.49-1.el6_2, libpng-2:1.2.49-1.el6_2.ppc, libpng-devel-2:1.2.49-1.el6_2 +1
    • Red Hat Enterprise Linux Server Optional (v. 6) libpng-2:1.2.49-1.el6_2, libpng-static-2:1.2.49-1.el6_2
    • Red Hat Enterprise Linux Workstation (v. 6) libpng-2:1.2.49-1.el6_2, libpng-devel-2:1.2.49-1.el6_2
    • Red Hat Enterprise Linux Workstation Optional (v. 6) libpng-2:1.2.49-1.el6_2, libpng-static-2:1.2.49-1.el6_2

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 4AffectedNo fix planned: Will not fix
RHEL Desktop Workstation (v. 5 client)Fixed RHSA-2012:0523
Red Hat Enterprise Linux (v. 5 server)Fixed RHSA-2012:0523
Red Hat Enterprise Linux Desktop (v. 5 client)Fixed RHSA-2012:0523
Red Hat Enterprise Linux Desktop (v. 6)Fixed RHSA-2012:0523
Red Hat Enterprise Linux Desktop Optional (v. 6)Fixed RHSA-2012:0523
Red Hat Enterprise Linux HPC Node (v. 6)Fixed RHSA-2012:0523
Red Hat Enterprise Linux HPC Node Optional (v. 6)Fixed RHSA-2012:0523
Red Hat Enterprise Linux Server (v. 6)Fixed RHSA-2012:0523
Red Hat Enterprise Linux Server Optional (v. 6)Fixed RHSA-2012:0523
Red Hat Enterprise Linux Workstation (v. 6)Fixed RHSA-2012:0523
Red Hat Enterprise Linux Workstation Optional (v. 6)Fixed RHSA-2012:0523

Timeline

  1. 2026-10-02 Threatist record created from CVE-2011-3048
  2. 2026-10-03 Alias added: GHSA-mmpj-hr4h-5g99

References

Advisory 14

Other 4

  • TI-2011-02683 Integer signedness error in the png_inflate function in pngrutil.c in libpng before… CVSS 3.1HIGH 8.8
  • TI-2010-01161 Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in… CVSS 3.1CRITICAL 9.8
  • TI-2026-20746 LIBPNG has a heap buffer overflow in png_set_quantize CVSS 4.0HIGH 8.3
  • TI-2025-40204 LIBPNG is vulnerable to a heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read` CVSS 3.1HIGH 7.1
  • TI-2025-40767 LIBPNG has an out-of-bounds read in png_image_read_composite CVSS 3.1HIGH 7.1
  • TI-2025-40066 LIBPNG is vulnerable to a buffer overflow in `png_image_read_composite` via incorrect palette premultiplication CVSS 3.1HIGH 7.1
See all 56 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences