VDB

GCVE-110-MAGEIA-2014-75

GCVE-110-MAGEIA-2014-75
Advisory Published
Vulnetix · Advisory published February 16, 2014
The png_do_expand_palette function in libpng before 1.6.8 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a PLTE chunk of zero bytes or a NULL palette, related to pngrtran.c and pngset.c (CVE-2013-6954).
Download JSON Open in Console

Affected Products

VendorProductVersionsPlatforms
Mageialibpng120 (affected), 1.2.50-3.1.mga3 (unaffected), 0 (affected), 1.2.50-3.1.mga3 (unaffected)—
Mageialibpng0 (affected), 1.5.13-2.1.mga3 (unaffected), 0 (affected), 1.5.13-2.1.mga3 (unaffected)—
Mageiamga-advisories0 (affected), 0.14-1.1.mga4 (unaffected)—

Aliases

CVE-2013-6954

References

Updated libpng and libpng12 packages fix security vulnerability
advisory
Updated libpng and libpng12 packages fix security vulnerability
issue
Updated libpng and libpng12 packages fix security vulnerability
issue
Updated libpng and libpng12 packages fix security vulnerability
issue
Updated mga-advisories package fixes versions.
advisory
Updated mga-advisories package fixes versions.
issue

Browse GCVE Records

73,442 records in the GCVE database · Updated July 17, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›