CVE-2015-8540

Published: Apr 14, 2016Modified: May 6, 2026

8.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

Integer underflow in the png_check_keyword function in pngwutil.c in libpng 0.90 through 0.99, 1.0.x before 1.0.66, 1.1.x and 1.2.x before 1.2.56, 1.3.x and 1.4.x before 1.4.19, and 1.5.x before 1.5.26 allows remote attackers to have unspecified impact via a space character as a keyword in a PNG image, which triggers an out-of-bounds read.

Affected (198)

Products: Redhat: Enterprise Linux Desktop Supplementary, Enterprise Linux Hpc Node, Enterprise Linux Server Supplementary, Enterprise Linux Workstation Supplementary · Libpng: Libpng · Fedoraproject: Fedora · +1 more

Show all products

Redhat: Enterprise Linux Desktop Supplementary, Enterprise Linux Hpc Node, Enterprise Linux Server Supplementary, Enterprise Linux Workstation Supplementary · Libpng: Libpng · Fedoraproject: Fedora · Debian: Debian Linux

Redhat

4 products

Enterprise Linux Desktop Supplementary

Enterprise Linux Hpc Node

Enterprise Linux Server Supplementary

Enterprise Linux Workstation Supplementary

1 product

1 product

1 product

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux Desktop Supplementary	Version 5.0
Redhat Enterprise Linux Desktop Supplementary	Version 6.0
Redhat Enterprise Linux Hpc Node	Version 6.0
Redhat Enterprise Linux Server Supplementary	Version 5.0
Redhat Enterprise Linux Server Supplementary	Version 6.0
Redhat Enterprise Linux Workstation Supplementary	Version 6.0

Configuration B

61 vulnerable

Vulnerable Software	Affected Versions
Libpng Libpng	Version 1.2.0
Libpng Libpng	Version 1.2.10
Libpng Libpng	Version 1.2.11
Libpng Libpng	Version 1.2.12
Libpng Libpng	Version 1.2.13
Libpng Libpng	Version 1.2.14
Libpng Libpng	Version 1.2.15
Libpng Libpng	Version 1.2.16
Libpng Libpng	Version 1.2.17
Libpng Libpng	Version 1.2.18
Libpng Libpng	Version 1.2.19
Libpng Libpng	Version 1.2.1
Libpng Libpng	Version 1.2.20
Libpng Libpng	Version 1.2.21
Libpng Libpng	Version 1.2.22
Libpng Libpng	Version 1.2.23
Libpng Libpng	Version 1.2.24
Libpng Libpng	Version 1.2.25
Libpng Libpng	Version 1.2.26
Libpng Libpng	Version 1.2.27
Libpng Libpng	Version 1.2.28
Libpng Libpng	Version 1.2.29
Libpng Libpng	Version 1.2.2
Libpng Libpng	Version 1.2.30
Libpng Libpng	Version 1.2.31
Libpng Libpng	Version 1.2.32
Libpng Libpng	Version 1.2.33
Libpng Libpng	Version 1.2.34
Libpng Libpng	Version 1.2.35
Libpng Libpng	Version 1.2.36
Libpng Libpng	Version 1.2.37
Libpng Libpng	Version 1.2.38
Libpng Libpng	Version 1.2.39
Libpng Libpng	Version 1.2.3
Libpng Libpng	Version 1.2.40
Libpng Libpng	Version 1.2.41
Libpng Libpng	Version 1.2.42
Libpng Libpng	Version 1.2.43
Libpng Libpng	Version 1.2.43 devel
Libpng Libpng	Version 1.2.44
Libpng Libpng	Version 1.2.45
Libpng Libpng	Version 1.2.45 devel
Libpng Libpng	Version 1.2.46
Libpng Libpng	Version 1.2.46 devel
Libpng Libpng	Version 1.2.47
Libpng Libpng	Version 1.2.47 beta
Libpng Libpng	Version 1.2.48
Libpng Libpng	Version 1.2.48 betas
Libpng Libpng	Version 1.2.49
Libpng Libpng	Version 1.2.4
Libpng Libpng	Version 1.2.50
Libpng Libpng	Version 1.2.51
Libpng Libpng	Version 1.2.52
Libpng Libpng	Version 1.2.53
Libpng Libpng	Version 1.2.54
Libpng Libpng	Version 1.2.55
Libpng Libpng	Version 1.2.5
Libpng Libpng	Version 1.2.6
Libpng Libpng	Version 1.2.7
Libpng Libpng	Version 1.2.8
Libpng Libpng	Version 1.2.9

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Libpng Libpng	Version 1.1.1

Configuration D

66 vulnerable

Vulnerable Software	Affected Versions
Libpng Libpng	Version 1.0.0
Libpng Libpng	Version 1.0.10
Libpng Libpng	Version 1.0.11
Libpng Libpng	Version 1.0.12
Libpng Libpng	Version 1.0.13
Libpng Libpng	Version 1.0.14
Libpng Libpng	Version 1.0.15
Libpng Libpng	Version 1.0.16
Libpng Libpng	Version 1.0.17
Libpng Libpng	Version 1.0.18
Libpng Libpng	Version 1.0.19
Libpng Libpng	Version 1.0.1
Libpng Libpng	Version 1.0.20
Libpng Libpng	Version 1.0.21
Libpng Libpng	Version 1.0.22
Libpng Libpng	Version 1.0.23
Libpng Libpng	Version 1.0.24
Libpng Libpng	Version 1.0.25
Libpng Libpng	Version 1.0.26
Libpng Libpng	Version 1.0.27
Libpng Libpng	Version 1.0.28
Libpng Libpng	Version 1.0.29
Libpng Libpng	Version 1.0.2
Libpng Libpng	Version 1.0.30
Libpng Libpng	Version 1.0.31
Libpng Libpng	Version 1.0.32
Libpng Libpng	Version 1.0.33
Libpng Libpng	Version 1.0.34
Libpng Libpng	Version 1.0.35
Libpng Libpng	Version 1.0.37
Libpng Libpng	Version 1.0.38
Libpng Libpng	Version 1.0.39
Libpng Libpng	Version 1.0.3
Libpng Libpng	Version 1.0.40
Libpng Libpng	Version 1.0.41
Libpng Libpng	Version 1.0.42
Libpng Libpng	Version 1.0.43
Libpng Libpng	Version 1.0.44
Libpng Libpng	Version 1.0.45
Libpng Libpng	Version 1.0.46
Libpng Libpng	Version 1.0.47
Libpng Libpng	Version 1.0.48
Libpng Libpng	Version 1.0.50
Libpng Libpng	Version 1.0.51
Libpng Libpng	Version 1.0.52
Libpng Libpng	Version 1.0.53
Libpng Libpng	Version 1.0.54
Libpng Libpng	Version 1.0.55
Libpng Libpng	Version 1.0.55 rc01
Libpng Libpng	Version 1.0.56
Libpng Libpng	Version 1.0.56 devel
Libpng Libpng	Version 1.0.57
Libpng Libpng	Version 1.0.57 rc01
Libpng Libpng	Version 1.0.58
Libpng Libpng	Version 1.0.59
Libpng Libpng	Version 1.0.5
Libpng Libpng	Version 1.0.60
Libpng Libpng	Version 1.0.61
Libpng Libpng	Version 1.0.62
Libpng Libpng	Version 1.0.63
Libpng Libpng	Version 1.0.64
Libpng Libpng	Version 1.0.65
Libpng Libpng	Version 1.0.6
Libpng Libpng	Version 1.0.7
Libpng Libpng	Version 1.0.8
Libpng Libpng	Version 1.0.9

Configuration E

1 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 23

Configuration F

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 6.0

Configuration G

19 vulnerable

Vulnerable Software	Affected Versions
Libpng Libpng	Version 1.4.0
Libpng Libpng	Version 1.4.10
Libpng Libpng	Version 1.4.11
Libpng Libpng	Version 1.4.12
Libpng Libpng	Version 1.4.13
Libpng Libpng	Version 1.4.14
Libpng Libpng	Version 1.4.15
Libpng Libpng	Version 1.4.16
Libpng Libpng	Version 1.4.17
Libpng Libpng	Version 1.4.18
Libpng Libpng	Version 1.4.1
Libpng Libpng	Version 1.4.2
Libpng Libpng	Version 1.4.3
Libpng Libpng	Version 1.4.4
Libpng Libpng	Version 1.4.5
Libpng Libpng	Version 1.4.6
Libpng Libpng	Version 1.4.7
Libpng Libpng	Version 1.4.8
Libpng Libpng	Version 1.4.9

Configuration H

6 vulnerable

Vulnerable Software	Affected Versions
Libpng Libpng	Version 0.90
Libpng Libpng	Version 0.95
Libpng Libpng	Version 0.96
Libpng Libpng	Version 0.97
Libpng Libpng	Version 0.98
Libpng Libpng	Version 0.99

Configuration I

36 vulnerable

Vulnerable Software	Affected Versions
Libpng Libpng	Version 1.5.0 beta
Libpng Libpng	Version 1.5.10 beta
Libpng Libpng	Version 1.5.11
Libpng Libpng	Version 1.5.11 beta
Libpng Libpng	Version 1.5.12
Libpng Libpng	Version 1.5.13
Libpng Libpng	Version 1.5.13 beta
Libpng Libpng	Version 1.5.14
Libpng Libpng	Version 1.5.15
Libpng Libpng	Version 1.5.16
Libpng Libpng	Version 1.5.17
Libpng Libpng	Version 1.5.18
Libpng Libpng	Version 1.5.19
Libpng Libpng	Version 1.5.1
Libpng Libpng	Version 1.5.1 beta
Libpng Libpng	Version 1.5.20 beta
Libpng Libpng	Version 1.5.21
Libpng Libpng	Version 1.5.22
Libpng Libpng	Version 1.5.23
Libpng Libpng	Version 1.5.24
Libpng Libpng	Version 1.5.25
Libpng Libpng	Version 1.5.2
Libpng Libpng	Version 1.5.2 beta
Libpng Libpng	Version 1.5.3 beta
Libpng Libpng	Version 1.5.4
Libpng Libpng	Version 1.5.4 beta
Libpng Libpng	Version 1.5.5
Libpng Libpng	Version 1.5.5 beta
Libpng Libpng	Version 1.5.6
Libpng Libpng	Version 1.5.6 beta
Libpng Libpng	Version 1.5.7
Libpng Libpng	Version 1.5.7 beta
Libpng Libpng	Version 1.5.8
Libpng Libpng	Version 1.5.8 beta
Libpng Libpng	Version 1.5.9
Libpng Libpng	Version 1.5.9 beta