← Database

CVE-2004-0421

MEDIUM CVSS: 5.0 Published: 2004-08-18 Modified: 2026-06-16

Description

The Portable Network Graphics library (libpng) 1.0.15 and earlier allows attackers to cause a denial of service (crash) via a malformed PNG image file that triggers an error that causes an out-of-bounds read when creating the error message.

Affected Platforms

Redhat Enterprise LinuxRedhat Enterprise Linux DesktopRedhat LibpngOpenpkg OpenpkgLibpng LibpngTrustix Secure Linux

Weakness Type

CWE-125

References