Known vulnerabilities in libpng (Alpine package)

Known vulnerabilities in libpng (Alpine package)

Vendor: Alpine Linux Development Team

Software: libpng (Alpine package)

Software CPE: cpe:2.3:o:alpine:libpng_alpine_package:*:*:*:*:*:alpine_linux:*:*

Website: https://alpinelinux.org/

Total vulnerabilities: 13

Public exploits: 1

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (13)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU18308 - Stack-based buffer overflow CVE-2018-14550	CWE-121	High	No	No	1.6.37-r0	18.04.2019	SB2019041812 SB2019080303 SB2020020613 and 1 more
#VU18304 - Memory corruption CVE-2018-14048	CWE-119	High	No	No	1.6.37-r0	18.04.2019	SB2019041812 SB2019080303 SB2019050660 and 3 more
#VU32352 - Improper input validation CVE-2015-8472	CWE-20	Medium	No	No	1.6.20-r0	21.01.2016	SB2016012101 SB2015122805 SB2015121617 and 24 more
#VU32378 - Memory corruption CVE-2015-8126	CWE-119	Medium	No	No	1.6.19-r0	13.11.2015	SB2015111301 SB2015113008 SB2015112302 and 32 more
#VU32450 - Memory corruption CVE-2015-0973	CWE-119	Medium	No	No	1.5.21-r0	18.01.2015	SB2015011801 SB2015012002 SB2015020219 and 3 more
#VU32449 - Heap-based Buffer Overflow CVE-2014-9495	CWE-122	High	No	No	1.5.21-r0	10.01.2015	SB2015011001 SB2015012002 SB2015020218 and 4 more
#VU32533 - Heap-based Buffer Overflow CVE-2013-7353	CWE-122	Medium	No	No	1.5.14-r0	06.05.2014	SB2014050601 SB2014052210 SB2014081407 and 1 more
#VU33845 - Improper input validation CVE-2013-7354	CWE-20	Medium	No	No	1.5.14-r0	06.05.2014	SB2014050602 SB2014052211 SB2014081407 and 1 more
#VU32577 - Improper input validation CVE-2013-6954	CWE-20	Medium	No	No	1.5.12-r1	12.01.2014	SB2014011202 SB2014022502 SB2014012907
#VU33108 - Improper input validation CVE-2013-1854	CWE-20	Medium	No	No	1.4.12-r0	20.03.2013	SB2013041203
#VU32693 - Permissions, Privileges, and Access Controls CVE-2012-3386	CWE-264	Low	No	No	1.4.12-r0	08.08.2012	SB2012080801 SB2012080201 SB2012080202 and 3 more
#VU32812 - Heap-based Buffer Overflow CVE-2011-3048	CWE-122	Medium	No	No	1.4.11-r0	29.05.2012	SB2012052902 SB2012041907 SB2012043005 and 4 more
#VU32860 - Memory corruption CVE-2010-1205	CWE-119	Medium	Available	No	1.4.3-r0	30.06.2010	SB2010063001 SB2010070702