CVE-2010-2249

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2010-06-30 · updated 2026-06-16
Weakness: CWE-401

Description

Memory leak in pngrutil.c in libpng before 1.2.44, and 1.4.x before 1.4.3, allows remote attackers to cause a denial of service (memory consumption and application crash) via a PNG image containing malformed Physical Scale (aka sCAL) chunks.

Affected products

Apple Iphone Os: from 2.0 through 4.1
Apple iTunes for Windows: before 10.2 — fixed in 10.2
Apple Safari: before 5.0.4 — fixed in 5.0.4
Apple tvOS: before 4.1.0 — fixed in 4.1.0
Canonical Ubuntu Linux: 6.06, 8.04, 9.04, 9.10, 10.04
Debian Linux: 5.0
Fedoraproject Fedora: 12, 13
pnggroup libpng: before 1.2.44; from 1.4.0 before 1.4.3 — fixed in 1.2.44, 1.4.3
Opensuse: 11.1, 11.2
SUSE Linux Enterprise Server: 9, 10-sp3, 11, 11-sp1
VMware Player: from 2.5 before 2.5.5; from 3.1 before 3.1.2 — fixed in 2.5.5, 3.1.2
VMware Workstation: from 6.5.0 before 6.5.5; from 7.1 before 7.1.2 — fixed in 6.5.5, 7.1.2

How to fix

Upgrade to a fixed version: Apple iTunes for Windows 10.2; Apple Safari 5.0.4; Apple tvOS 4.1.0; pnggroup libpng 1.2.44, 1.4.3; VMware Player 2.5.5, 3.1.2; VMware Workstation 6.5.5, 7.1.2. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2010-2249 or the next vulnerability affects your stack