CVE-2011-2691 is a denial-of-service vulnerability in libpng versions 1.0.x, 1.2.x, 1.4.x, and 1.5.x, affecting products like Debian and Fedora. A remote attacker can trigger an application crash by providing a crafted PNG image, due to a NULL pointer argument being used instead of an empty string in the png_err function. This vulnerability has a CVSS score of 6.5 (Medium), indicating a network-based attack with low complexity, requiring user interaction, and resulting in high availability impact. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 1.0.0, < 1.0.55CPE matchmatch criteria | cpe:2.3:a:libpng:libpng:*:*:*:*:*:*:*:* | ||
>= 1.2.0, < 1.2.45CPE matchmatch criteria | cpe:2.3:a:libpng:libpng:*:*:*:*:*:*:*:* | ||
>= 1.4.0, < 1.4.8CPE matchmatch criteria | cpe:2.3:a:libpng:libpng:*:*:*:*:*:*:*:* | ||
>= 1.5.0, < 1.5.4CPE matchmatch criteria | cpe:2.3:a:libpng:libpng:*:*:*:*:*:*:*:* | ||
14CPE matchmatch criteria | cpe:2.3:o:fedoraproject:fedora:14:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
libpng: Crash in png_default_error due to use of NULL Pointer
Jul 7, 2011The png_err function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 makes a function call using a NULL pointer argument instead of an empty-string argument, which allows remote attackers to cause a denial of service (application crash) via a crafted PNG image.
Jul 2, 2011