CVE-2013-6954 PUBLISHED CVSS 5 MEDIUM

The png_do_expand_palette function in libpng before 1.6.8 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via (1) a PLTE chunk of zero bytes or (2) a NULL palette, related to pngrtran.c and pngset.c.

EPSS 3.55% · 87.6th percentile

Risk Scores

CVSS v2.0
5
EPSS Score
3.55%
87.6th percentile

Affected Products

VendorProductVersions
libpnglibpng1.6.3, 0, 1.6.0
n/an/an/a

Timeline

References

…and 8 more

Open in Interactive Console →