png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
Configuration 5 (hide)
|
Configuration 6 (hide)
|
Configuration 7 (hide)
|
Configuration 8 (hide)
| AND |
|
Configuration 9 (hide)
|
Configuration 10 (hide)
|
History
No history.
Information
Published : 2019-02-04 08:29
Updated : 2026-06-17 02:40
NVD link : CVE-2019-7317
Mitre link : CVE-2019-7317
CVE.ORG link : CVE-2019-7317
JSON object : View
Products Affected
netapp
- cloud_backup
- e-series_santricity_storage_manager
- e-series_santricity_web_services
- active_iq_unified_manager
- steelstore
- oncommand_workflow_automation
- oncommand_insight
- e-series_santricity_unified_manager
- e-series_santricity_management
- snapmanager
- plug-in_for_symantec_netbackup
redhat
- enterprise_linux
- enterprise_linux_desktop
- enterprise_linux_for_ibm_z_systems
- enterprise_linux_for_power_big_endian
- satellite
- enterprise_linux_workstation
- enterprise_linux_for_power_little_endian
- enterprise_linux_for_scientific_computing
suse
- linux_enterprise
oracle
- hyperion_infrastructure_technology
- mysql
- jdk
- java_se
mozilla
- firefox
- thunderbird
hpe
- xp7_command_view_advanced_edition_suite
libpng
- libpng
debian
- debian_linux
opensuse
- package_hub
- leap
hp
- xp7_command_view
canonical
- ubuntu_linux
CWE
CWE-416
Use After Free
