Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The png_push_read_chunk function in pngpread.c in the progressive decoder in libpng 1.6.x through 1.6.9 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via an IDAT chunk with a length of zero.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
libpng ‘png_push_read_chunk’函数安全漏洞
Vulnerability Description
libpng是一个可对PNG图形文件实现创建、读写等操作的PNG参考库。 libpng 1.6.x至1.6.9版本的progressive decoder中的pngpread.c文件中的‘png_push_read_chunk’函数存在安全漏洞。远程攻击者可借助零长度的IDAT数据块利用该漏洞造成拒绝服务(无限循环和CPU资源消耗)。
CVSS Information
N/A
Vulnerability Type
N/A