CVE-2006-7244

N/A
Published: August 31, 2011 at 11:00 PM UTC
Updated: June 16, 2026 at 10:34 PM UTC
1 product affected across 1 vendorLibpng

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 1%

Description

Memory leak in pngwutil.c in libpng 1.2.13beta1, and other versions before 1.2.15beta3, allows context-dependent attackers to cause a denial of service (memory leak or segmentation fault) via a JPEG image containing an iCCP chunk with a negative embedded profile length.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

v ≤ 1.2.151.0.01.0.11.0.101.0.10 beta11.0.10 rc11.0.111.0.11 beta11.0.11 beta21.0.11 beta31.0.11 rc11.0.121.0.12 beta11.0.12 rc11.0.131.0.141.0.151.0.15 rc11.0.15 rc21.0.15 rc31.0.161.0.171.0.17 rc11.0.181.0.191.0.19 rc11.0.19 rc21.0.19 rc31.0.19 rc51.0.21.0.201.0.211.0.21 rc11.0.21 rc21.0.221.0.22 rc11.0.231.0.23 rc11.0.23 rc21.0.23 rc31.0.23 rc41.0.23 rc51.0.241.0.24 rc11.0.251.0.25 rc11.0.25 rc21.0.261.0.271.0.27 rc11.0.27 rc21.0.27 rc31.0.27 rc41.0.27 rc51.0.27 rc61.0.281.0.28 rc21.0.28 rc31.0.28 rc41.0.28 rc51.0.28 rc61.0.291.0.29 beta11.0.29 rc11.0.29 rc21.0.29 rc31.0.31.0.301.0.30 rc11.0.311.0.31 rc011.0.321.0.331.0.341.0.351.0.371.0.381.0.391.0.401.0.411.0.421.0.431.0.441.0.451.0.461.0.471.0.481.0.51.0.501.0.511.0.521.0.531.0.541.0.61.0.6 a1.0.6 d1.0.6 e1.0.6 f1.0.6 g1.0.6 h1.0.6 i1.0.6 j1.0.71.0.7 beta111.0.7 beta121.0.7 beta131.0.7 beta141.0.7 beta151.0.7 beta161.0.7 beta171.0.7 beta181.0.7 rc11.0.7 rc21.0.81.0.8 beta11.0.8 beta21.0.8 beta31.0.8 beta41.0.8 rc11.0.91.0.9 beta11.0.9 beta101.0.9 beta21.0.9 beta31.0.9 beta41.0.9 beta51.0.9 beta61.0.9 beta71.0.9 beta81.0.9 beta91.0.9 rc11.0.9 rc21.2.01.2.0 beta11.2.0 beta21.2.0 beta31.2.0 beta41.2.0 beta51.2.0 rc11.2.11.2.1 beta11.2.1 beta21.2.1 beta31.2.1 beta41.2.1 rc11.2.1 rc21.2.101.2.10 beta11.2.10 beta21.2.10 beta31.2.10 beta41.2.10 beta51.2.10 beta61.2.10 beta71.2.10 rc11.2.10 rc21.2.10 rc31.2.111.2.11 beta11.2.11 beta21.2.11 beta31.2.11 beta41.2.11 rc11.2.11 rc21.2.11 rc31.2.11 rc51.2.131.2.13 beta11.2.13 rc11.2.13 rc21.2.141.2.14 beta11.2.14 beta21.2.14 rc11.2.151.2.15 beta1beta2

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

CVSS

Confidentiality
NONE
Integrity
NONE
Availability
PARTIAL
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-399

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card