CVE-2015-8126

תיאור (מקור, אנגלית)

Multiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x before 1.5.24, and 1.6.x before 1.6.19 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a small bit-depth value in an IHDR (aka image header) chunk in a PNG image.

מדדים

EPSS — סבירות ניצול

10% (אחוזון 100) נכון ל-19/10/2026

CWE

CWE-120

מוצרים מושפעים

libpng: libpng; fedoraproject: fedora; opensuse: leap; opensuse: opensuse; suse: linux enterprise desktop; suse: linux enterprise server; debian: debian linux; redhat: satellite; redhat: enterprise linux desktop; redhat: enterprise linux eus; redhat: enterprise linux server; redhat: enterprise linux server aus; redhat: enterprise linux server tus; redhat: enterprise linux workstation; redhat: enterprise linux

קישורים

• https://code.google.com/p/chromium/issues/detail?id=560291 Issue TrackingPatchThird Party Advisory
• https://code.google.com/p/chromium/issues/detail?id=560291 Issue TrackingPatchThird Party Advisory
• http://googlechromereleases.blogspot.com/2016/03/stable-channel-update.html Third Party Advisory
• http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html Mailing ListThird Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172324‮… Third Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172620‮… Third Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172647‮… Third Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172663‮… Third Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172769‮… Third Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172797‮… Third Party Advisory