Red Hat Libpng vulnerabilities

2 CVEs affecting Red Hat Libpng, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2012-3425, published 2012-08-13.

More from Red Hat.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2004-0421, published 2004-08-18. Medium severity, CVSS 5.0. EPSS: 4.1% chance of exploitation in the next 30 days. The Portable Network Graphics library (libpng) 1.0.15 and earlier allows attackers to cause a denial of service (crash) via a malformed PNG image file that triggers an error that causes an…
• CVE-2012-3425, published 2012-08-13. Medium severity, CVSS 4.3. EPSS: 3.4% chance of exploitation in the next 30 days. The png_push_read_zTXt function in pngpread.c in libpng 1.0.x before 1.0.58, 1.2.x before 1.2.48, 1.4.x before 1.4.10, and 1.5.x before 1.5.10 allows remote attackers to cause a denial of service…