CVE-2016-10087
Fixed in a distro release EPSS 5%
The png_set_text_2 function in libpng 0.71 before 1.0.67, 1.2.x before 1.2.57, 1.4.x before 1.4.20, 1.5.x before 1.5.28, and 1.6.x before 1.6.27 allows context-dependent attackers to cause a NULL pointer dereference vectors involving loading a text chunk into a png structure, removing the text, and then adding another text chunk to the structure.
Products: libpng
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Arch Linux | lib32-libpng | 1.6.27-1 |
| Arch Linux | libpng | 1.6.27-1 |
| Debian 12 | libpng1.6 | 1.6.27-1 |
| Debian 13 | libpng1.6 | 1.6.27-1 |
| Debian 14 | libpng1.6 | 1.6.27-1 |
| SUSE Linux Enterprise Desktop 12 SP1 | libpng12 | 1.2.50-19.1 |
| SUSE Linux Enterprise Desktop 12 SP1 | libpng15 | 1.5.22-9.1 |
| SUSE Linux Enterprise Desktop 12 SP1 | libpng16 | 1.6.8-14.1 |
| SUSE Linux Enterprise Desktop 12 SP2 | libpng12 | 1.2.50-19.1 |
| SUSE Linux Enterprise Desktop 12 SP2 | libpng15 | 1.5.22-9.1 |
| SUSE Linux Enterprise Desktop 12 SP2 | libpng16 | 1.6.8-14.1 |
| SUSE Linux Enterprise Server 11 SP4 | libpng12-0 | 1.2.31-5.43.1 |
| SUSE Linux Enterprise Server 12 SP1 | libpng12 | 1.2.50-19.1 |
| SUSE Linux Enterprise Server 12 SP1 | libpng15 | 1.5.22-9.1 |
| SUSE Linux Enterprise Server 12 SP1 | libpng16 | 1.6.8-14.1 |
| SUSE Linux Enterprise Server 12 SP2 | libpng12 | 1.2.50-19.1 |
| SUSE Linux Enterprise Server 12 SP2 | libpng15 | 1.5.22-9.1 |
| SUSE Linux Enterprise Server 12 SP2 | libpng16 | 1.6.8-14.1 |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 | libpng12 | 1.2.50-19.1 |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 | libpng15 | 1.5.22-9.1 |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 | libpng16 | 1.6.8-14.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | libpng12-0 | 1.2.31-5.43.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | libpng12 | 1.2.50-19.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | libpng15 | 1.5.22-9.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | libpng16 | 1.6.8-14.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | libpng12 | 1.2.50-19.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | libpng15 | 1.5.22-9.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | libpng16 | 1.6.8-14.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | libpng12-0 | 1.2.31-5.43.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP1 | libpng12 | 1.2.50-19.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP1 | libpng16 | 1.6.8-14.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP2 | libpng12 | 1.2.50-19.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP2 | libpng16 | 1.6.8-14.1 |
| Ubuntu 14.04 LTS | libpng | 1.2.50-1ubuntu2.14.04.3 |
| Ubuntu 16.04 LTS | libpng | 1.2.54-1ubuntu1.1 |
| Ubuntu 18.04 LTS | libpng1.6 | 1.6.34-1ubuntu0.18.04.1 |
| Ubuntu 22.04 LTS | libpng1.6 | 1.6.37-3ubuntu0.6 |
| Ubuntu Pro 14.04 LTS | libpng | 1.2.50-1ubuntu2.14.04.3+esm2 |
| Ubuntu Pro 16.04 LTS | libpng | 1.2.54-1ubuntu1.1+esm3 |
| Ubuntu Pro 16.04 LTS | libpng1.6 | 1.6.20-2ubuntu0.1~esm4 |
| Ubuntu Pro 18.04 LTS | libpng1.6 | 1.6.34-1ubuntu0.18.04.2+esm3 |
| Ubuntu Pro 20.04 LTS | libpng1.6 | 1.6.37-2ubuntu0.1~esm3 |
| openSUSE Tumbleweed | libpng16 | 1.6.37-3.3 |