CVE-2012-3425 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Libpng

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory BufferCWE-122 — Heap-based Buffer OverflowCWE-125 — Out-of-bounds Read7 documents7 sources
Severity
4.3MEDIUMNVD
EPSS
3.2%
top 12.91%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
LibpngCanonical Ubuntu LinuxDebian Linux+2 more
Timeline
PublishedAug 13
Latest updateMay 14

Description

The png_push_read_zTXt function in pngpread.c in libpng 1.0.x before 1.0.58, 1.2.x before 1.2.48, 1.4.x before 1.4.10, and 1.5.x before 1.5.10 allows remote attackers to cause a denial of service (out-of-bounds read) via a large avail_in field value in a PNG image.

CVSS vector

AV:N/AC:M/C:N/I:N/A:PExploitability: 8.6 | Impact: 2.9

Affected Packages4 packages

▶Ubuntulibpng/libpng< 1.2.50-1ubuntu2.14.04.1
▶NVDlibpng/libpng125 versions+124
▶NVDredhat/libpng1.2.2-16, 1.2.2-20+1
▶NVDopensuse/opensuse11.4, 12.1+1

Also affects: Debian Linux 6.0, Ubuntu Linux 12.04, 14.04, 15.04, 15.10

🔴Vulnerability Details

3
GHSA
GHSA-2q8q-w58c-r6vg: The png_push_read_zTXt function in pngpread↗2022-05-14
▶
OSV
libpng vulnerabilities↗2015-11-19
▶
CVEList
CVE-2012-3425: The png_push_read_zTXt function in pngpread↗2012-08-13
▶

📋Vendor Advisories

2
Ubuntu
libpng vulnerabilities↗2015-11-19
▶
Red Hat
libpng: Out-of heap-based buffer read by inflating certain PNG images↗2012-04-08
▶

💬Community

1
Bugzilla
CVE-2012-3425 libpng: Out-of heap-based buffer read by inflating certain PNG images↗2012-04-17
▶
CVE-2012-3425 — Libpng vulnerability | cvebase