CVE-2006-3334: Greg Roelofs Libpng

High severity, CVSS 7.5. EPSS: 4.1% chance of exploitation in the next 30 days.

Buffer overflow in the png_decompress_chunk function in pngrutil.c in libpng before 1.2.12 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via unspecified vectors related to "chunk error processing," possibly involving the "chunk_name".

Affected products

• Greg Roelofs Libpng: up to and including 1.2.11; version 1.2.0 only; version 1.2.1 only; version 1.2.2 only; version 1.2.3 only; version 1.2.4 only; …

Published 2006-06-30. Last modified 2026-06-16.