Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
libpng 1.0.6 through 1.0.32, 1.2.0 through 1.2.26, and 1.4.0beta01 through 1.4.0beta19 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a PNG file with zero length "unknown" chunks, which trigger an access of uninitialized memory.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Libpng库未知类型块处理远程代码执行漏洞
Vulnerability Description
libpng是多种应用程序所使用的解析PNG图形格式的函数库 。 libpng库在处理畸形格式的PNG文件时存在漏洞，成功利用此漏洞允许本地攻击者读取敏感信息、导致拒绝服务或执行任意指令 。 libpng库没有正确地处理未知类型的PNG块，如果使用该库的应用程序在特定情况下调用了png_set_read_user_chunk_fn()或png_set_keep_unknown_chunks()函数的话，长度为0的PNG块就会导致通过free()调用使用未初始化的内存 。
CVSS Information
N/A
Vulnerability Type
N/A