Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2018-13785

24
FAUCET Score

CVE-2018-13785 describes a denial-of-service vulnerability in libpng version 1.6.34, affecting products from vendors like Canonical, Oracle, and Red Hat. This medium-severity flaw (CVSS 6.5) stems from an integer overflow and subsequent divide-by-zero error in the png_check_chunk_length function when processing a specially crafted PNG file, requiring user interaction. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this vulnerability.

Impacted Technologies

VendorProductVersion(s)CPE
1.6.34CPE matchmatch criteria
cpe:2.3:a:libpng:libpng:1.6.34:*:*:*:*:*:*:*
14.04CPE matchmatch criteria
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
16.04CPE matchmatch criteria
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
17.10CPE matchmatch criteria
cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*
18.04CPE matchmatch criteria
cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*

CVSS Data

CVSS version used by this source: 3.1

6.5MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
Exploitability Score
2.8
Impact Score
3.6
CvssVersion
3.1

Exploit Intelligence

EPSS Score
4.47%
Probability of exploitation in next 30 days
EPSS Percentile
90.5%
Percentile rank of EPSS score among Peer Group
As of 2026-07-28
Model: v2026.06.15
This CVE's current EPSS score of 0.0447 is in the 96th percentile among its peer group of 26,236 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (16)

github_advisorypatch availablevia nvd_reference
View patch
oraclepatch availablevia nvd_reference
View patch
redhatpatch availablevia redhat_api
Product: Oracle Java for Red Hat Enterprise Linux 6Fixed in: java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6
View patch
redhatpatch availablevia redhat_api
Product: Oracle Java for Red Hat Enterprise Linux 7Fixed in: java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el7
View patch
redhatpatch availablevia redhat_api
Product: Oracle Java for Red Hat Enterprise Linux 7Fixed in: java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7
View patch
redhatpatch availablevia redhat_api
Product: Oracle Java for Red Hat Enterprise Linux 7Fixed in: java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 6 SupplementaryFixed in: java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 6 SupplementaryFixed in: java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10
View patch
redhatpatch availablevia redhat_api
Product: Oracle Java for Red Hat Enterprise Linux 6Fixed in: java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7 SupplementaryFixed in: java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Satellite 5.6Fixed in: java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Satellite 5.7Fixed in: java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Satellite 5.8Fixed in: java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7 SupplementaryFixed in: java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7
View patch
redhatpatch availablevia redhat_api
Product: Oracle Java for Red Hat Enterprise Linux 6Fixed in: java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6
View patch
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 6Fixed in: java-1.6.0-ibm

Vendor Advisories (1)

redhatCVE-2018-13785Low

libpng: Integer overflow and resultant divide-by-zero in pngrutil.c:png_check_chunk_length() allows for denial of service

Apr 5, 2018

References

access.redhat.com / errata/RHSA-2018:3000
Third Party Advisory
access.redhat.com / errata/RHSA-2018:3001
Third Party Advisory
access.redhat.com / errata/RHSA-2018:3002
Third Party Advisory
access.redhat.com / errata/RHSA-2018:3003
Third Party Advisory
access.redhat.com / errata/RHSA-2018:3007
Third Party Advisory
access.redhat.com / errata/RHSA-2018:3008
Third Party Advisory
access.redhat.com / errata/RHSA-2018:3533
Third Party Advisory
access.redhat.com / errata/RHSA-2018:3534
Third Party Advisory
access.redhat.com / errata/RHSA-2018:3671
Third Party Advisory
access.redhat.com / errata/RHSA-2018:3672
Third Party Advisory
access.redhat.com / errata/RHSA-2018:3779
Third Party Advisory
access.redhat.com / errata/RHSA-2018:3852
Third Party Advisory
github.com / glennrp/libpng/commit/8a05766cb74af05c04c53e6c9d60c13fc4d59bf2
PatchThird Party Advisory
security.gentoo.org / glsa/201908-10
Third Party Advisory
security.netapp.com / advisory/ntap-20181018-0001
Third Party Advisory
sourceforge.net / p/libpng/bugs/278
Third Party Advisory
usn.ubuntu.com / 3712-1
Third Party Advisory
oracle.com / technetwork/security-advisory/cpuoct2018-4428296.html
PatchVendor Advisory
securityfocus.com / bid/105599
Broken LinkThird Party AdvisoryVDB Entry
securitytracker.com / id/1041889
Broken LinkThird Party AdvisoryVDB Entry