Unscored DSA-1750-1 3 CVEs

libpng - several vulnerabilities

Published Mar 22, 2009 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

Release	Package	Fixed in
Debian · 4.0	libpng	1.2.15~beta5-1+etch2
Debian · 5.0	libpng	1.2.27-2+lenny2

Vulnerabilities 3

Unscored —

CVE-2008-5907

The png_check_keyword function in pngwutil.c in libpng before 1.0.42, and 1.2.x before 1.2.34, might allow context-depe…

Jan 15, 2009
Unscored —

CVE-2008-6218

Memory leak in the png_handle_tEXt function in pngrutil.c in libpng before 1.2.33 rc02 and 1.4.0 beta36 allows context-…

Feb 20, 2009
Unscored —

CVE-2009-0040

The PNG reference library (aka libpng) before 1.0.43, and 1.2.x before 1.2.35, as used in pngcrush and other applicatio…

Feb 22, 2009