{"id":"CVE-2011-2692","url":"https://www.cyber-defence.io/tools/cve/CVE-2011-2692","generatedAt":"2026-10-27T18:55:23.387Z","title":"The png_handle_sCAL function in pngrutil.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 does not properly handle invalid sCAL chunks, which allows remote attackers to cause a denial of service (memory…","description":"The png_handle_sCAL function in pngrutil.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 does not properly handle invalid sCAL chunks, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a crafted PNG image that triggers the reading of uninitialized memory.","published":"2011-07-17T20:55:02.000Z","lastModified":"2026-06-16T23:31:49.000Z","status":"Modified","sourceIdentifier":"secalert@redhat.com","cvss":{"version":"3.1","score":8.8,"severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},"cwe":["CWE-119"],"affected":["libpng/libpng","fedoraproject/fedora","debian/debian linux","canonical/ubuntu linux"],"epss":{"score":0.04227,"percentile":0.90941,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (4.23%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"http://libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng/libpng%3Ba=commit%3Bh=61a2d8a2a7b03023e63eae9a3e64607aaaa6d339","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html","tags":["Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2012/May/msg00001.html","tags":["Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2011-July/063118.html","tags":["Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/45046","tags":["Broken Link"],"source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/45405","tags":["Broken Link"],"source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/45415","tags":["Broken Link"],"source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/45445","tags":["Broken Link"],"source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/45460","tags":["Broken Link"],"source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/45461","tags":["Broken Link"],"source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/45492","tags":["Broken Link"],"source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/49660","tags":["Broken Link"],"source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-201206-15.xml","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://sourceforge.net/mailarchive/forum.php?thread_name=003101cc2790%24fb5d6e80%24f2184b80%24%40acm.org&forum_name=png-mng-implement","tags":["Exploit","Issue Tracking","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT5002","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT5281","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2011/dsa-2287","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://www.kb.cert.org/vuls/id/819894","tags":["Third Party Advisory","US Government Resource"],"source":"secalert@redhat.com"},{"url":"http://www.libpng.org/pub/png/libpng.html","tags":["Product","Vendor Advisory"],"source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:151","tags":["Broken Link"],"source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2011/07/13/2","tags":["Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2011-1103.html","tags":["Broken Link"],"source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2011-1104.html","tags":["Broken Link"],"source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2011-1105.html","tags":["Broken Link"],"source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/48618","tags":["Third Party Advisory","VDB Entry"],"source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-1175-1","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=720612","tags":["Issue Tracking","Patch","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/68536","tags":["Third Party Advisory","VDB Entry"],"source":"secalert@redhat.com"},{"url":"http://libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng/libpng%3Ba=commit%3Bh=61a2d8a2a7b03023e63eae9a3e64607aaaa6d339","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html","tags":["Mailing List","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2012/May/msg00001.html","tags":["Mailing List","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2011-July/063118.html","tags":["Mailing List","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/45046","tags":["Broken Link"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/45405","tags":["Broken Link"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/45415","tags":["Broken Link"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/45445","tags":["Broken Link"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/45460","tags":["Broken Link"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/45461","tags":["Broken Link"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/45492","tags":["Broken Link"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/49660","tags":["Broken Link"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-201206-15.xml","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/mailarchive/forum.php?thread_name=003101cc2790%24fb5d6e80%24f2184b80%24%40acm.org&forum_name=png-mng-implement","tags":["Exploit","Issue Tracking","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT5002","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT5281","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2011/dsa-2287","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/819894","tags":["Third Party Advisory","US Government Resource"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.libpng.org/pub/png/libpng.html","tags":["Product","Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:151","tags":["Broken Link"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2011/07/13/2","tags":["Mailing List","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2011-1103.html","tags":["Broken Link"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2011-1104.html","tags":["Broken Link"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2011-1105.html","tags":["Broken Link"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/48618","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-1175-1","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=720612","tags":["Issue Tracking","Patch","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/68536","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2011-2692","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}