← Back

CVE-2014-9495

nvd nist
Published: Jan 10, 2015Modified: May 6, 2026

JSON object

Loading...
8.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Heap-based buffer overflow in the png_combine_row function in libpng before 1.5.21 and 1.6.x before 1.6.16, when running on 64-bit systems, might allow context-dependent attackers to execute arbitrary code via a "very wide interlaced" PNG image.

Affected (31)

Products: Apple: Mac Os X · Libpng: Libpng
1 product
Mac Os X
1 product
Libpng
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Up to 10.11.3
Configuration B
30 vulnerable
Vulnerable SoftwareAffected Versions
Libpng
Up to 1.5.20
Version 1.6.0
Version 1.6.0 beta
Version 1.6.10
Version 1.6.10 beta
Version 1.6.11
Version 1.6.11 beta
Version 1.6.12 beta
Version 1.6.13
Version 1.6.13 beta
Version 1.6.14
Version 1.6.14 beta
Version 1.6.15
Version 1.6.15 beta
Version 1.6.1
Version 1.6.1 beta
Version 1.6.2
Version 1.6.2 beta
Version 1.6.3
Version 1.6.3 beta
Version 1.6.4
Version 1.6.4 beta
Version 1.6.5
Version 1.6.6
Version 1.6.7
Version 1.6.7 beta
Version 1.6.8
Version 1.6.8 beta
Version 1.6.9
Version 1.6.9 beta

References (22)

Source: cve@mitre.org
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.