vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2009-0040

N/A
Published: February 22, 2009 at 10:00 PM UTC
Updated: June 16, 2026 at 11:04 PM UTC
9 products affected across 6 vendorsmacOSDebian LinuxFedora

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 5%

Description

The PNG reference library (aka libpng) before 1.0.43, and 1.2.x before 1.2.35, as used in pngcrush and other applications, allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PNG file that triggers a free of an uninitialized pointer in (1) the png_read_png function, (2) pCAL chunk handling, or (3) setup of 16-bit gamma tables.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

iPhone OS· Apple
95%
v < 3.0
Affected range stops below 3.0, so it looks safe — our inference, not a vendor statement
macOS· Apple
95%
v < 10.5.8
Affected range stops below 10.5.8, so it looks safe — our inference, not a vendor statement
Debian Linux· Debiandrupal
95%
4.05.0
Fedora· Fedora Projectrpm
95%
109
Libpng· Libpng
95%
v < 1.0.431.2.0 ≤ v < 1.2.35
Affected range stops below 1.0.43, so it looks safe — our inference, not a vendor statement
Affected range stops below 1.2.35, so it looks safe — our inference, not a vendor statement
openSUSE· openSUSE
95%
10.311.011.1
Linux Enterprise· SUSE
95%
10.09.0
Linux Enterprise Desktop· SUSE
95%
10 sp2
Linux Enterprise Server· SUSE
95%
10 sp2

References (82)

x_refsource_CONFIRMBroken LinkVendor Advisory
Source: [email protected]
ftp://ftp.simplesystems.org/pub/png/src/libpng-1.2.34-ADVISORY.txt
x_refsource_CONFIRMProduct
Source: [email protected]
http://downloads.sourceforge.net/libpng/libpng-1.2.34-ADVISORY.txt
Vendor Advisoryx_refsource_APPLEMailing List
Source: [email protected]
http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html
Vendor Advisoryx_refsource_APPLEMailing List
Source: [email protected]
http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html
Vendor Advisoryx_refsource_APPLEMailing List
Source: [email protected]
http://lists.apple.com/archives/security-announce/2009/May/msg00002.html
Vendor Advisoryx_refsource_APPLEBroken LinkMailing List
Source: [email protected]
http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html
Vendor Advisoryx_refsource_SUSEMailing List
Source: [email protected]
http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html
Vendor Advisoryx_refsource_SUSEMailing List
Source: [email protected]
http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.html

CVSS

6.8MEDIUM[email protected]
Confidentiality
PARTIAL
Integrity
PARTIAL
Availability
PARTIAL
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-824

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card