Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-28162

Опубликовано: 27 янв. 2026
Источник: nvd
CVSS3: 5.5
EPSS Низкий

Описание

Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service via the pngimage with AddressSanitizer (ASan), the program leaks memory in various locations, eventually leading to high memory usage and causing the program to become unresponsive

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:libpng:libpng:*:*:*:*:*:*:*:*
Версия от 1.6.43 (включая) до 1.6.46 (включая)

EPSS

Процентиль: 4%
0.00139
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-120

Связанные уязвимости

CVSS3: 5.5
ubuntu
6 месяцев назад

Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service via the pngimage with AddressSanitizer (ASan), the program leaks memory in various locations, eventually leading to high memory usage and causing the program to become unresponsive

CVSS3: 6.2
redhat
6 месяцев назад

Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service via the pngimage with AddressSanitizer (ASan), the program leaks memory in various locations, eventually leading to high memory usage and causing the program to become unresponsive

CVSS3: 5.5
debian
6 месяцев назад

Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local a ...

CVSS3: 5.5
github
6 месяцев назад

Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service via the pngimage with AddressSanitizer (ASan), the program leaks memory in various locations, eventually leading to high memory usage and causing the program to become unresponsive

CVSS3: 5.5
fstec
6 месяцев назад

Уязвимость библиотеки libpng, связанная с копированием буфера без проверки размера входных данных, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 4%
0.00139
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-120