VDB

GCVE-110-MAGEIA-2018-468

GCVE-110-MAGEIA-2018-468
Advisory Published
Vulnetix · Advisory published November 27, 2018
In libpng until version 1.6.35, a wrong calculation of row_factor in the png_check_chunk_length function (pngrutil.c) may trigger an integer overflow and resultant divide-by-zero while processing a crafted PNG file, leading to a denial of service. (CVE-2018-13785) This update fixes it, also providing the current maintenance releases in the 1.2 and 1.6 stable branches.
Download JSON Open in Console

Affected Products

VendorProductVersionsPlatforms
Mageialibpng0 (affected), 1.6.35-1.mga6 (unaffected)—
Mageialibpng120 (affected), 1.2.59-1.mga6 (unaffected)—

Aliases

CVE-2018-13785

References

Updated libpng(12) packages fix security vulnerability
advisory
Updated libpng(12) packages fix security vulnerability
issue
Updated libpng(12) packages fix security vulnerability
issue

Browse GCVE Records

72,148 records in the GCVE database · Updated July 14, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›