Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2010-2249

23
FAUCET Score

CVE-2010-2249 describes a memory leak vulnerability in libpng versions prior to 1.2.44 and 1.4.3, affecting various products including Apple, Canonical, Debian, and VMware. This flaw allows remote attackers to trigger a denial of service through memory exhaustion and application crashes by supplying a malformed PNG image containing specific sCAL chunks. Rated Medium severity (CVSS 6.5), it requires user interaction (UI:R) but has a low attack complexity (AC:L) and can lead to high availability impact (A:H). There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this vulnerability.

Impacted Technologies

VendorProductVersion(s)CPE
< 1.2.44CPE matchmatch criteria
cpe:2.3:a:libpng:libpng:*:*:*:*:*:*:*:*
>= 1.4.0, < 1.4.3CPE matchmatch criteria
cpe:2.3:a:libpng:libpng:*:*:*:*:*:*:*:*
< 10.2CPE matchmatch criteria
cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*
< 5.0.4CPE matchmatch criteria
cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*
>= 2.0, <= 4.1CPE matchmatch criteria
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

6.5MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
Exploitability Score
2.8
Impact Score
3.6
CvssVersion
3.1

Exploit Intelligence

EPSS Score
2.63%
Probability of exploitation in next 30 days
EPSS Percentile
83.9%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0263 is in the 92nd percentile among its peer group of 26,219 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (10)

microsoftpatch availablevia msrc
Product: azl3 syslinux libpng-1.2.44 on Azure Linux 3.0Fixed in: libpng-1.2.44
microsoftpatch availablevia msrc
Product: azl3 syslinux 6.04-11 on Azure Linux 3.0
microsoftpatch availablevia msrc
Product: 19237-17084Fixed in: libpng-1.2.44
microsoftpatch availablevia msrc
Product: 16848-17084
redhatpatch availablevia nvd_reference
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 3Fixed in: libpng-2:1.2.2-30
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 3Fixed in: libpng10-0:1.0.13-21
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 4Fixed in: libpng-2:1.2.7-3.el4_8.3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 4Fixed in: libpng10-0:1.0.16-3.el4_8.4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 5Fixed in: libpng-2:1.2.10-7.1.el5_5.3
View patch

Vendor Advisories (2)

redhatCVE-2010-2249Low

libpng: Memory leak when processing Physical Scale (sCAL) images

Jun 25, 2010
microsoft2010-Jun/CVE-2010-2249Moderate

Memory leak in pngrutil.c in libpng before 1.2.44, and 1.4.x before 1.4.3, allows remote attackers to cause a denial of service (memory consumption and application crash) via a PNG image containing malformed Physical Scale (aka sCAL) chunks.

Jun 2, 2010

References

libpng.git.sourceforge.net / git/gitweb.cgi
lists.apple.com / archives/security-announce/2010//Nov/msg00000.html
Mailing ListThird Party Advisory
lists.apple.com / archives/security-announce/2010//Nov/msg00003.html
Mailing ListThird Party Advisory
lists.apple.com / archives/security-announce/2011/Mar/msg00000.html
Mailing ListThird Party Advisory
lists.apple.com / archives/security-announce/2011//Mar/msg00004.html
Mailing ListThird Party Advisory
lists.fedoraproject.org / pipermail/package-announce/2010-July/044283.html
Mailing ListThird Party Advisory
lists.fedoraproject.org / pipermail/package-announce/2010-July/044397.html
Mailing ListThird Party Advisory
lists.opensuse.org / opensuse-security-announce/2010-09/msg00006.html
Mailing ListThird Party Advisory
lists.vmware.com / pipermail/security-announce/2010/000105.html
Mailing ListThird Party Advisory
bugzilla.redhat.com / show_bug.cgi
Issue TrackingPatchThird Party Advisory
secunia.com / advisories/40302
Broken Link
secunia.com / advisories/40336
Broken Link
secunia.com / advisories/40472
Broken Link
secunia.com / advisories/40547
Broken Link
secunia.com / advisories/41574
Broken Link
secunia.com / advisories/42314
Broken Link
secunia.com / advisories/42317
Broken Link
exchange.xforce.ibmcloud.com / vulnerabilities/59816
Third Party AdvisoryVDB Entry
slackware.com / security/viewer.php
Mailing ListPatchThird Party Advisory
support.apple.com / kb/HT4435
Broken Link
support.apple.com / kb/HT4456
Third Party Advisory
support.apple.com / kb/HT4457
Third Party Advisory
support.apple.com / kb/HT4554
Third Party Advisory
support.apple.com / kb/HT4566
Broken Link
debian.org / security/2010/dsa-2072
Third Party Advisory
libpng.org / pub/png/libpng.html
ProductVendor Advisory
mandriva.com / security/advisories
Broken Link
securityfocus.com / bid/41174
PatchThird Party AdvisoryVDB Entry
securitytracker.com / id
Third Party AdvisoryVDB Entry
ubuntu.com / usn/USN-960-1
Third Party Advisory
vmware.com / security/advisories/VMSA-2010-0014.html
Third Party Advisory
vupen.com / english/advisories/2010/1612
Broken Link
vupen.com / english/advisories/2010/1637
Broken Link
vupen.com / english/advisories/2010/1755
Broken Link
vupen.com / english/advisories/2010/1837
Broken Link
vupen.com / english/advisories/2010/1846
Broken Link
vupen.com / english/advisories/2010/1877
Broken Link
vupen.com / english/advisories/2010/2491
Broken Link
vupen.com / english/advisories/2010/3045
Broken Link
vupen.com / english/advisories/2010/3046
Broken Link