CVE-2006-7244: Libpng

Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days.

Memory leak in pngwutil.c in libpng 1.2.13beta1, and other versions before 1.2.15beta3, allows context-dependent attackers to cause a denial of service (memory leak or segmentation fault) via a JPEG image containing an iCCP chunk with a negative embedded profile length.

Affected products

• Libpng Libpng: up to and including 1.2.15; version 1.0.0 only; version 1.0.1 only; version 1.0.2 only; version 1.0.3 only; version 1.0.5 only; …

Published 2011-08-31. Last modified 2026-06-16.