CVE-2006-0481: Greg Roelofs Libpng

Medium severity, CVSS 5.0. EPSS: 3.1% chance of exploitation in the next 30 days.

Heap-based buffer overflow in the alpha strip capability in libpng 1.2.7 allows context-dependent attackers to cause a denial of service (crash) when the png_do_strip_filler function is used to strip alpha channels out of the image.

Affected products

• Greg Roelofs Libpng: version 1.2.7 only

Published 2006-01-31. Last modified 2026-06-16.