CVE-2009-0040: Apple iPhone OS

Medium severity, CVSS 6.8. EPSS: 4.8% chance of exploitation in the next 30 days.

The PNG reference library (aka libpng) before 1.0.43, and 1.2.x before 1.2.35, as used in pngcrush and other applications, allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PNG file that triggers a free of an uninitialized pointer in (1) the png_read_png function, (2) pCAL chunk handling, or (3) setup of 16-bit gamma tables.

Affected products

• Apple iPhone OS: before 3.0 (fixed in 3.0)
• Apple Mac OS X: before 10.5.8 (fixed in 10.5.8)
• Debian Debian Linux: version 4.0 only; version 5.0 only
• Fedoraproject Fedora: version 9 only; version 10 only
• Libpng Libpng: before 1.0.43 (fixed in 1.0.43); from 1.2.0, before 1.2.35 (fixed in 1.2.35)
• Opensuse Opensuse: version 10.3 only; version 11.0 only; version 11.1 only
• Suse Linux Enterprise: version 9.0 only; version 10.0 only
• Suse Linux Enterprise Desktop: version 10 only
• Suse Linux Enterprise Server: version 10 only

Published 2009-02-22. Last modified 2026-06-16.