CVE-2007-5268: Canonical Ubuntu Linux

Medium severity, CVSS 4.3. EPSS: 3.1% chance of exploitation in the next 30 days.

pngrtran.c in libpng before 1.0.29 and 1.2.x before 1.2.21 use (1) logical instead of bitwise operations and (2) incorrect comparisons, which might allow remote attackers to cause a denial of service (crash) via a crafted PNG image.

Affected products

• Canonical Ubuntu Linux: version 6.06 only; version 6.10 only; version 7.04 only; version 7.10 only
• Libpng Libpng: before 1.0.29 (fixed in 1.0.29); from 1.2.0, before 1.2.21 (fixed in 1.2.21)

Published 2007-10-08. Last modified 2026-06-16.