CVE-2014-9495

Publication date 10 January 2015

Last updated 24 July 2024


Ubuntu priority

Heap-based buffer overflow in the png_combine_row function in libpng before 1.5.21 and 1.6.x before 1.6.16, when running on 64-bit systems, might allow context-dependent attackers to execute arbitrary code via a "very wide interlaced" PNG image.

Read the notes from the security team

Status

Package Ubuntu Release Status
libpng 14.10 utopic
Not affected
14.04 LTS trusty
Not affected
12.04 LTS precise
Not affected
10.04 LTS lucid
Not affected

Notes


mdeslaur

only 1.5.x and 1.6.x