← Back to browse
·
API
CVE-2017-12652
Severity
CRITICAL
CVSS
9.8
EPSS
0.04113
Risk score
40.64
CISA KEV
No
PoC
No
Published
2019-07-10
Modified
2025-06-09
First seen
2026-08-07
Aliases
EUVD-2017-4191, GHSA-94XG-QM4R-9R7C
Products
n/a:n/a n/a
Sources
euvd
EUVD-2017-4191
Description
libpng before 1.6.32 does not properly check the length of chunks against the user limit.
References
https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-4191
https://github.com/glennrp/libpng/blob/df7e9dae0c4aac63d55361e35709c864fa1b8363/ANNOUNCE
http://www.securityfocus.com/bid/109269
https://support.f5.com/csp/article/K88124225
https://support.f5.com/csp/article/K88124225?utm_source=f5support&utm_medium=RSS
https://security.netapp.com/advisory/ntap-20220506-0003/
https://github.com/pnggroup/libpng/commit/347538efbdc21b8df684ebd92d37400b3ce85d55