CVE-2018-14048 PUBLISHED

An issue has been found in libpng 1.6.34. It is a SEGV in the function png_free_data in png.c, related to the recommended error handling for png_read_image.

EPSS 0.83% · 74.4th percentile

Risk Scores

EPSS Score
0.83%
74.4th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:16.04:LTSlibpng1.2.54-1ubuntu1.1, 1.2.54-1, 1.2.51-0ubuntu3
Ubuntu:Pro:16.04:LTSlibpng1.61.6.20-2, 0
Ubuntu:Pro:18.04:LTSlibpng1.61.6.34-1ubuntu0.18.04.2+esm2, 0, 1.6.34-1
Ubuntu:14.04:LTSlibpng1.2.49-5ubuntu1, 1.2.49-4ubuntu1, 0

Timeline

References

Open in Interactive Console →