CVE-2011-2501

MEDIUM

Libpng < 1.0.55 - Out-of-Bounds Read

Title source: rule

Description

The png_format_buffer function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 allows remote attackers to cause a denial of service (application crash) via a crafted PNG image that triggers an out-of-bounds read during the copying of error-message data. NOTE: this vulnerability exists because of a CVE-2004-0421 regression. NOTE: this is called an off-by-one error by some sources.

References (23)

... and 3 more

Scores

CVSS v3 6.5
EPSS 0.0225
EPSS Percentile 84.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Classification

CWE
CWE-125
Status draft

Affected Products (8)

libpng/libpng < 1.0.55
fedoraproject/fedora
debian/debian_linux
debian/debian_linux
canonical/ubuntu_linux
canonical/ubuntu_linux
canonical/ubuntu_linux
canonical/ubuntu_linux

Timeline

Published Jul 17, 2011
Tracked Since Feb 18, 2026