What’s Vulnerable › Vulnerabilities

CVE-2011-2692

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 4.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2011-07-17 · updated 2026-06-16
• Weakness: CWE-119

Description

The png_handle_sCAL function in pngrutil.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 does not properly handle invalid sCAL chunks, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a crafted PNG image that triggers the reading of uninitialized memory.

Affected products

• Canonical Ubuntu Linux: 8.04, 10.04, 10.10, 11.04
• Debian Linux: 5.0, 6.0
• Fedoraproject Fedora: 14
• pnggroup libpng: from 1.0.0 before 1.0.55; from 1.2.0 before 1.2.45; from 1.4.0 before 1.4.8; from 1.5.0 before 1.5.4 — fixed in 1.0.55, 1.2.45, 1.4.8, 1.5.4

How to fix

Upgrade to a fixed version: pnggroup libpng 1.0.55, 1.2.45, 1.4.8, 1.5.4. Check the vendor advisory for mitigations.

References

• http://libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng/libpng%3Ba=commit%3Bh=61a2d8a2a7b03023e63eae9a3e64607aaaa6d339
• http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html
• http://lists.apple.com/archives/security-announce/2012/May/msg00001.html
• http://lists.fedoraproject.org/pipermail/package-announce/2011-July/063118.html
• http://secunia.com/advisories/45046
• http://secunia.com/advisories/45405
• http://secunia.com/advisories/45415
• http://secunia.com/advisories/45445
• http://secunia.com/advisories/45460
• http://secunia.com/advisories/45461
• http://secunia.com/advisories/45492
• http://secunia.com/advisories/49660

Get alerted when CVE-2011-2692 or the next vulnerability affects your stack