CVE-2016-10087

See a problem?
Please try reporting it to the source first.

Source

https://nvd.nist.gov/vuln/detail/CVE-2016-10087

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-10087.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2016-10087

Related

Published

2017-01-30T22:59:00Z

Modified

2025-02-19T02:09:45.545393Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Summary

[none]

Details

The pngsettext_2 function in libpng 0.71 before 1.0.67, 1.2.x before 1.2.57, 1.4.x before 1.4.20, 1.5.x before 1.5.28, and 1.6.x before 1.6.27 allows context-dependent attackers to cause a NULL pointer dereference vectors involving loading a text chunk into a png structure, removing the text, and then adding another text chunk to the structure.

References

Affected packages

Debian:11 / libpng1.6

Package

Name: libpng1.6
Purl: pkg:deb/debian/libpng1.6?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.6.27-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:12 / libpng1.6

Package

Name: libpng1.6
Purl: pkg:deb/debian/libpng1.6?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.6.27-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:13 / libpng1.6

Package

Name: libpng1.6
Purl: pkg:deb/debian/libpng1.6?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.6.27-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Git / github.com/clearlinux-pkgs/libpng

Affected ranges

Type: GIT
Repo: https://github.com/clearlinux-pkgs/libpng
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Last affected

22f6397d7f409613311eb5727c866eced29e06db

Last affected

72d3f13792d37b5c8eac9196a9982b0139f621cc

Last affected

ad1845a4b5fff50aa6412351de87eed8c444676c

Last affected

fa14e16527ac2ffa29f0832651bf17d0e6b1bc0c

Type: GIT
Repo: https://github.com/glennrp/libpng
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Last affected

01f17eee9e542c613142527f516fbbef9d7a443f

Last affected

02ad0efbc858a8f02c7878fe7a152358d2f08478

Last affected

073070791a94bc049ec4e5e5ae8370cf203457ae

Last affected

0c440812db5f3f8929db87ff840bc51fd09a8af3

Last affected

0c577a7f9583528bec990ffaa114d9a6788c8201

Last affected

0d5805822f8817a17937462a2fd0606ffdad378e

Last affected

0ea69cdfa9ef7318b6446695badbf31944126131

Last affected

0f71645dfeebab01388e5eb0e372b9bdcd56271c

Last affected

0f820b1a7010ccb56a3d3f934b5f19dfa4cd4054

Last affected

0fc7d586324f3d8b7f92090db4210149a73715e6

Last affected

10781048be99b6b79a477e77f4736d0be9555f57

Last affected

10de36ef25872453b435ba7c0de72da038e8dba6

Last affected

115817d118aa6c8ece819d6b9e2b76f37268ce44

Last affected

13cfbac075f9f91522421171dced2b6d2d9b523f

Last affected

1510084c3f5c31e0bc91f52f5d9771db8e0b7d39

Last affected

16ee3e98703aba41aa9a1eaafa05a9e680b968ea

Last affected

1719fac606f702b16c5a07f716c290228a7d8e15

Last affected

176d2b622ea8878abbd65db89033ae88dc948fb3

Last affected

1a2e75ccf1c19fd4d81276e1a0880ceca4ece5c2

Last affected

1e73a532f58bd67f0ef3ddfd89bd0a1d923bc7d7

Last affected

1ff473f3fd5ea8238ed2a8cf465154b30e5a9e8e

Last affected

209d3eb5c68510a7883a3b69a85537cf3f9b283d

Last affected

212ff60146dd563dc01e5deb089ca534bf71847f

Last affected

2296f211e84916ec5a54019ce2c8abea61e8ff83

Last affected

22eaa89c5a6ee9077a49238681b35ee39ed51afc

Last affected

247e2305810068eb340142edea49d54f47f11538

Last affected

259fb7761d747655c607efcec7a12ff1f3c24561

Last affected

25c8915f7cce46c1b516af56649d91165d1b8557

Last affected

25e785e30c3fe69ff4ca1615cc530cce4810ae17

Last affected

2687fcc7b5eb95ebeaaa70f3f9de6812727c2ab8

Last affected

287fb8924819dd3b3a8c6cbc0e172972e5654da5

Last affected

2b359bd2fdea9bdc9c86a1cf63a6b3234c525a4c

Last affected

2b667e49232dd36aa7ea3a7382f265fd7f97d2cd

Last affected

2d2fe5e9efbaba6339742807b93a2646aae88475

Last affected

2eb0852fd6993b7d25a0e942231bf4d7ddbd04e6

Last affected

2f87c9b5170ba7ffa4457f86b838de6866ddac73

Last affected

328353990f44b8cd7885b9adfc9df8c5508f1632

Last affected

32fc5ceb91a86c2cc8dfe37521e3d28c8825c272

Last affected

3341f519f40bc1309367e3c543303a0a518f5c5d

Last affected

33b25bf1a845317f15534da29f291e983c918ef4

Last affected

37f116a9005ea5f082a7c4ce6ec6854b01d4b02d

Last affected

382410249dd2e121be8efe054d83e18c7b3e7e66

Last affected

38a706f83f0b56c8114cc28fcb6750557997a233

Last affected

38f0418ee75079be812b607a310a1cac24dd3b94

Last affected

391459424ee52b7164ab8e60aca8fc4da4a93c62

Last affected

397100eb8abf576dc749ee26df15e312c8fe9e57

Last affected

3d3aae1697897e92176530bc6e85c551772614ea

Last affected

3d5a520610bf787e5c6e3fccf9814de73f548e64

Last affected

3e2263abf2694e3e0297bac005d25837791245e5

Last affected

3e753eb8b2d19c7eb72c81a722a0eeb45b98cabe

Last affected

3f6e7d5e6465dc7ebc75a82dc489af87595407de

Last affected

4049c1ac2a79b2ea9b1f4a5bead684f6c8ada8da

Last affected

4109c5d71b2e2ae14873b860a6b51e700dda67b3

Last affected

413ed2824658e4ee850fb2543973b3c221f7f006

Last affected

415d26805a38023a23583ec3687927c481945ba0

Last affected

42ae02aa08465cd5378ac50517c92daed0085b56

Last affected

4449a29e1e2dbac71e8def471165993f61b14565

Last affected

45b47c1a1c09f4c69e473acaa1123908d9bcf2cb

Last affected

46243cd1e503633ba214192b02bd1bab7920c8de

Last affected

4761085af830c09f35e5b120d8996bcbfed969b9

Last affected

47a0c422ca6ade5ae6de718ee62a28fa163cf6d8

Last affected

484a8a10fe72449fdae0bcabd4cec416777e0207

Last affected

4922b1b6e9de3df7c9575d3884f19bab871bd80f

Last affected

49284edeff12e08d485e2546411f50142160bf3e

Last affected

4ae1de1114cb83c6f1462e9f76c8efc23f3924c9

Last affected

4b1b9ce0285b541f1af8a88a2496e06c5c7c25c7

Last affected

4df37bfa4f79dcd742fca6155e26b8d37b591c30

Last affected

4e0e854b89fc8ec7659fb15adc4cd28b9b5173d2

Last affected

4ee97b0891a7bc0157bfea35c03c7d6f4c364eb8

Last affected

4f66bef47f405236ddce6001628e5ce913812be5

Last affected

4fa097d58bf1ed51b76ff9311efaa8b6c5bf5a04

Last affected

4fc3118b594d4c3a8ba82179208b8766a7bb7dfe

Last affected

5087805e7c403db81a9eb527eca59bebd4fc90db

Last affected

51f0eb458499f09af01f37699fd2f308ec410fca

Last affected

5314d4afa82f9e8a653e971ad9b08c5c6fe69d68

Last affected

53ae7dc514f11cd0220d709a6347155069c48310

Last affected

6048b12510b10117c00ae1a1260ab3ee23d01379

Last affected

62095d5f0342979a5e60dd6c3a50b12a724442b7

Last affected

623e09d8c51cf336df2b2a6cbe907d092c1075f5

Last affected

64b481e7140c547c675165401e976c25182fd071

Last affected

67faef917b5eacbf7c066d2e5f6d6ce707346760

Last affected

69b1448f197cfcd697a3eb0ef294f3a171210016

Last affected

6d76471acd6ee528f21458658ccf4aff330e0357

Last affected

6e00020a9ff23b28b43db527a2b89227cbdea2e9

Last affected

6fb875a54ea8a950111a4eac6100d01d6025a4ac

Last affected

72c637ec63fd34d2280f828ee75658ed09ae8d5b

Last affected

73176b9030135e2c6732889c5fffcfb53df2b30c

Last affected

764b52ad457e1bbfa41bc83d0cc455b3ebaebb15

Last affected

7836e2189432bc7b132789ae56abb8abb99be1cb

Last affected

787081f75b9a466316a16766e8eb5fb93e753d68

Last affected

78d28c6b9663d52465a3f6d15e21a995729ba410

Last affected

795b564635c57ac443ebe8eaeff358dc86a76371

Last affected

7a4e497b6285b4ae8c669e33de287ed7df3c9b59

Last affected

7c7e39ea3013beee48a19123140a77e28dcbd764

Last affected

7d76ba739364941aa87f57c01e2bc3e1ee301980

Last affected

7e3a82cd9cdd6b9619a7ababce4f1dadf5e6fbaf

Last affected

809355b4aa84ae06f9a4e063c7e9d22fd7930170

Last affected

80b4f15ae376447da8c157d27002eabfc39b361e

Last affected

80d4e25c9d20bc2fa713daacfbc998d1e28f8137

Last affected

82090022e79522bea7723d4b0d2e90a979adcecd

Last affected

82282113b99a8cff4596685822d1a23414c80772

Last affected

83a7187a28e61375af3449a0406960d6078441c7

Last affected

847e9efb66c9d4f9332e147674b6ed88aceef9c8

Last affected

8493de3cee597f4016df7c0e05cba1f253e04d60

Last affected

849b2c9cbfcb144ac06459cdad06cd0b652fbd7a

Last affected

87544ac62be7d29561270b85271125353e281aba

Last affected

877590539cb260dbad950b35ead729f3869d7838

Last affected

8799d783614af6f2e0f47bdbd129f3e840916111

Last affected

8833ad415c4b103529777ded8e122a1fb6447722

Last affected

88dd30b232362b65cca374dda39096888163dd6b

Last affected

8a35e25852e666f0d962808412a353af96a65a68

Last affected

8c12b3c2cc24a4c0d5889e0e2a02e7f340a9dc9a

Last affected

8d15fc29b0985ba2bde1d7c7c7192957e884023d

Last affected

917648ecb92f45537924b3c46a4a811b956c7023

Last affected

93e111afc5a1f0d69a27ecaec806482f33516908

Last affected

94322f3f8fab766497c38bcb19a4b3f0ff867e27

Last affected

98c9d73605cfc89d36886ea1a6a1c595fe8781a4

Last affected

9a30a1a115d6e81bff5f3f9644b7a0a0ddaefe5e

Last affected

9b0cc95bb72a8df2766a03367b51efd0d1803814

Last affected

9f7b16ad19813101bc9bf7cc17db9ea375b5b0d4

Last affected

a058d6cee061b0a2f22f017d87f4b303fd7bfd10

Last affected

a1621559192c5ec4ec98cc692a71841e368bd622

Last affected

a36c4f3f165fb2dd1772603da7f996eb40326621

Last affected

a582b8f840c4dad1148fee6f0e1f0486f28da5d9

Last affected

a77ef625a6bb7d7808e0f084df2ca1d9d2627154

Last affected

a86bef279cb2482391120b65a8444e7f2d7f7483

Last affected

a8e07274ae8a761242dc60cba4e7b57f0c0b582c

Last affected

ac278cc06a9a88a1a5f5880be14d83930bd09710

Last affected

ac43a87820ea12e35da8d0bb9caa178ab80e07c9

Last affected

afbb32433c16bb00593a0227931be43888d93d1a

Last affected

b157898378385117c85de8bdfcff0c0a294ffe7c

Last affected

b2e01bd505b1a784c2c73067c32799ce08781707

Last affected

b50d5cea2b9ebc10d6c329b15d4cf7c5d8a209f4

Last affected

b6c41935288b7276d7accda69d7d896e08fa841a

Last affected

b7f5fe143044fbfb22125b00ce16c2bd9323971e

Last affected

b8c4b82d1806064afd94349012b46f7c26c97733

Last affected

bb56c39d16523032fc5b6821ad5e20c8f7412c2d

Last affected

bc6726bc041e6ed57e8b42582ab9e7a1147de316

Last affected

bceda5f9d648bfcc5c2ebc2d8d32b7ff35bfeade

Last affected

be3977de2c3214f9ca9b193d4169f7719d99a760

Last affected

c01ee053b17f3c453949d1697686614f9da113bf

Last affected

c21f90c334a4d7a8f6764c749de0fdea6dc851f5

Last affected

c2573702cff228d0b0a7729cecd7727f78c16750

Last affected

c4a2ae6cace0459ef5d39b2601de75a145f9c08e

Last affected

c4d44b72e895624515ac42e1921480d009155fcc

Last affected

c4e0f3de647b6312d5bbdba73ce79384d3ccb951

Last affected

c53778ff53a73ad2d676602f5dc7019566be5058

Last affected

c79c23c0d5228259f2ca9641f7b2db80ff5ba209

Last affected

c802480614a5ca50111d36c98421cea66f044f4e

Last affected

c944229859b6368b8387b1d4062d65de1bd4a0c1

Last affected

cbfb2ba8124d4ead475ec9ef469413136abfc525

Last affected

cd3f5bb5077dfef55951e65c231842e7bcaf97b4

Last affected

cfbed9bdf200652db330ccefdc3ba0e4b4d20d25

Last affected

d061149ae873b3faa8a4a06aea8efac8bdc84b98

Last affected

d12aa503228d84f6453a8b6940bc7397c86aaf3b

Last affected

d404b6d48874769873897a709b1fe5a32a4f6878

Last affected

d4e8109a481c9acaa84bc6db4db711a42256b6c9

Last affected

d91c64e4284dea38f7a3d36bb3c7de3533c2bb47

Last affected

dc2e72f1a2e996e1f1cdd46f83aaf4006e36abd3

Last affected

dcc3505c7bd0660876fc80110f8e3581900a186a

Last affected

ddda5f01c79d4ca2fbeeb6a2fc580475b7a039b6

Last affected

df68ef4d5e1fc90a4def8a52f87096a2d95d7530

Last affected

df80d38897e386322106785c4dd06e9d5a3944fd

Last affected

df8fc6680e8b0fbcd78a44cddb285161e3dc5225

Last affected

e058ce14ea5fbaa551fcad1a2926c408af53c281

Last affected

e088ce7363bbd42e25ab6dc6608a15725972eda8

Last affected

e3358d1839b059fe076bb94940ce3a6cbcffb86b

Last affected

e371893ea3a955f8c79ffb51ca7f0c954ab42b4b

Last affected

e3a66311237bd7a6e390d3da8beb5ad74fcee5d0

Last affected

e429c66cea68e9b8f538fad42bc7a41a0855b785

Last affected

e6d77d80a92f700a5260e939018dba2a4a8f937f

Last affected

e73cc88b21d25a6451dbc3e90fc6d60967269820

Last affected

e7625063dcde7ffdfff1bc90667beb0004b86908

Last affected

e8ef689cb943e68de9f302b11c44a6ae29870c6c

Last affected

ebfd716fc4faacd1ef2866ebdff273e4ef277ce7

Last affected

ed6db9d86b2aa32c616c96701da3b8d3bfe7c2c9

Last affected

edb772fd6d8bb3fc8dde34763fffbb1d2ba60bb5

Last affected

efe95a6953205daffa287ad34ff4cf5380f4b152

Last affected

f3e8a339e941171c9c6f15f9719fa12acf05e144

Last affected

f47b4b1bf7c6fc0a0824fad91f9dd2a80fc80c18

Last affected

f50c91b7bd6d7c539bd8820c8ab2e37a86108a44

Last affected

f54a50aa4ee5ff33dde46f3a20c9838c5db6f9ca

Last affected

f5ea1b709548843a76ce7de0b8e932b4b54a1549

Last affected

f7d1a1703354aeded87bc39a2736c2ab7a755406

Last affected

f9b9775253d797b0b0ca7efc7997afc6f8716f69

Last affected

f9d6ce301d7c426ca69b440146320db42acac74b

Last affected

fab1959d00d89c84432b165fe0d384cc96ee23b2

Last affected

fba872492be45a4d436097e9ade1d697afadf23f

Last affected

fc0786a4425cb10ca966557bc366a52d080a20c6

Last affected

fd4078cb1b8454bcf0ac9d07cb84c7cdc611a6f2

Last affected

ffb50e6516543aa7a968e1fb3481ddfe2093930e

Affected versions

1.*

1.6.18-12

1.6.19-13

1.6.19-14

1.6.20-15

1.6.20-16

1.6.21-17

1.6.21-18

1.6.21-19

1.6.22-20

1.6.23-21

1.6.24-22

v0.*

v0.71

v0.81

v0.82

v0.85

v0.86

v0.87

v0.88

v0.89

v0.89c

v0.90

v0.96

v0.97

v0.97a

v0.97c

v0.98

v0.99

v0.99a

v0.99c

v0.99d

v0.99e

v0.99i

v0.99j

v0.99k

v0.99m

v0.99n

v0.99p

v1.*

v1.0.0

v1.0.0a

v1.0.0b

v1.0.1

v1.0.10

v1.0.10beta1

v1.0.10rc1

v1.0.11

v1.0.11beta1

v1.0.11beta2

v1.0.11beta3

v1.0.11rc1

v1.0.12beta1

v1.0.13

v1.0.14

v1.0.15

v1.0.15rc1

v1.0.15rc2

v1.0.15rc3

v1.0.16

v1.0.17

v1.0.18

v1.0.19

v1.0.19rc1

v1.0.19rc2

v1.0.19rc5

v1.0.1a

v1.0.1b

v1.0.1c

v1.0.1d

v1.0.1e

v1.0.2

v1.0.20

v1.0.21

v1.0.21rc1

v1.0.21rc2

v1.0.22

v1.0.22rc1

v1.0.23

v1.0.23rc1

v1.0.23rc2

v1.0.23rc3

v1.0.23rc4

v1.0.23rc5

v1.0.24

v1.0.24rc1

v1.0.25

v1.0.25rc1

v1.0.25rc2

v1.0.26

v1.0.27

v1.0.27rc1

v1.0.27rc2

v1.0.27rc3

v1.0.27rc4

v1.0.27rc5

v1.0.27rc6

v1.0.2a

v1.0.2b

v1.0.3

v1.0.4

v1.0.4-pre1

v1.0.4-pre2

v1.0.4-pre3

v1.0.4c

v1.0.4d

v1.0.4d2

v1.0.4e

v1.0.4f

v1.0.5

v1.0.5-pre1

v1.0.5a

v1.0.5c

v1.0.5d

v1.0.5h

v1.0.5q

v1.0.5s

v1.0.6

v1.0.6a

v1.0.6d

v1.0.6e

v1.0.6f

v1.0.6g

v1.0.6h

v1.0.6i

v1.0.6j

v1.0.7

v1.0.7beta11

v1.0.7beta12

v1.0.7beta13

v1.0.7beta14

v1.0.7beta15

v1.0.7beta16

v1.0.7beta17

v1.0.7beta18

v1.0.7rc1

v1.0.7rc2

v1.0.8

v1.0.8beta1

v1.0.8beta2

v1.0.8beta3

v1.0.8beta4

v1.0.8rc1

v1.0.9

v1.0.9beta1

v1.0.9beta10

v1.0.9beta2

v1.0.9beta3

v1.0.9beta4

v1.0.9beta5

v1.0.9beta6

v1.0.9beta7

v1.0.9beta8

v1.0.9beta9

v1.0.9rc1

v1.0.9rc2

v1.00