CVE-2007-2445: Png Reference Library Libpng

Medium severity, CVSS 5.0. EPSS: 5.2% chance of exploitation in the next 30 days.

The png_handle_tRNS function in pngrutil.c in libpng before 1.0.25 and 1.2.x before 1.2.17 allows remote attackers to cause a denial of service (application crash) via a grayscale PNG image with a bad tRNS chunk CRC value.

Affected products

• Png Reference Library Libpng: up to and including 1.0.15; up to and including 1.2.16

Published 2007-05-16. Last modified 2026-06-16.