CVE-2007-5266: libpng Numeric Errors

EPSS trend

Probability

3.42%

Chance of exploitation in the next 30 days

Percentile

89%

Versus all other CVEs

30-day change

0.00 pp

From 3.42% on 21-09-2026

21-09-202621-10-2026

EPSS score

3.42%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

33 links

issues.rpath.com/browse/RPL-1814X Refsource CONFIRMBroken Link
www.mandriva.com/security/advisories?name=MDKSA-2007:217Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory
secunia.com/advisories/35386Third Party AdvisoryX Refsource SECUNIA
sourceforge.net/mailarchive/…Mailing ListX Refsource MLISTThird Party Advisory
sunsolve.sun.com/search/document.do?assetkey=1-77-1020521.1-1Vendor AdvisoryX Refsource SUNALERTBroken Link
www.vupen.com/english/advisories/2009/1560VDB EntryX Refsource VUPENThird Party Advisory
www.vupen.com/english/advisories/2009/1462VDB EntryX Refsource VUPENThird Party Advisory
bugs.gentoo.org/show_bug.cgi?id=195261X Refsource CONFIRMThird Party Advisory
secunia.com/advisories/27529Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/27746Third Party AdvisoryX Refsource SECUNIA

Show all 33 references

www.coresecurity.com?action=item&id=2148X Refsource MISCThird Party Advisory
sunsolve.sun.com/search/document.do?assetkey=1-66-259989-1Vendor AdvisoryX Refsource SUNALERTBroken Link
secunia.com/advisories/35302Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2008/0924/referencesVDB EntryX Refsource VUPENThird Party Advisory
www.us-cert.gov/cas/techalerts/TA08-150A.htmlThird Party AdvisoryX Refsource CERTUS Government Resource
secunia.com/advisories/29420Third Party AdvisoryX Refsource SECUNIA
lists.apple.com/archives/security-announce/2008/Mar/msg00001.htmlVendor AdvisoryX Refsource APPLEMailing ListThird Party Advisory
secunia.com/advisories/27284Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/30430Third Party AdvisoryX Refsource SECUNIA
lists.apple.com/archives/security-announce/2008//May/msg00001.htmlVendor AdvisoryX Refsource APPLEMailing ListThird Party Advisory
android-developers.blogspot.com/2008/03/android-sdk-update-m5-rc15-released.htmlX Refsource CONFIRMThird Party Advisory
secunia.com/advisories/30161Third Party AdvisoryX Refsource SECUNIA
www.gentoo.org/security/en/glsa/glsa-200805-07.xmlVendor AdvisoryX Refsource GENTOOThird Party Advisory
sourceforge.net/mailarchive/…Mailing ListX Refsource MLISTThird Party Advisory
docs.info.apple.com/article.html?artnum=307562X Refsource CONFIRMThird Party Advisory
www.gentoo.org/security/en/glsa/glsa-200711-08.xmlVendor AdvisoryX Refsource GENTOOThird Party Advisory
www.vupen.com/english/advisories/2008/1697VDB EntryX Refsource VUPENThird Party Advisory
slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.520323Vendor AdvisoryX Refsource SLACKWAREThird Party Advisory
www.securityfocus.com/archive/1/483582/100/0/threadedMailing ListX Refsource BUGTRAQThird Party AdvisoryVDB Entry
support.avaya.com/elmodocs2/security/ASA-2009-208.htmX Refsource CONFIRMThird Party Advisory
www.securityfocus.com/bid/25957VDB EntryX Refsource BIDThird Party Advisory
www.securityfocus.com/archive/1/489135/100/0/threadedMailing ListX Refsource BUGTRAQThird Party AdvisoryVDB Entry
secunia.com/advisories/27629Third Party AdvisoryX Refsource SECUNIA

Related vulnerabilities

CVE-2018-13785canonicalubuntu_linux+104.41%8y ago09-07-2018 13:00In libpng 1.6.34, a wrong calculation of row_factor in the png_check_chunk_length function (pngrutil.c) may trigger an integer overflow and resultant divide-by-zero while processing a crafted PNG file, leading to a denial of service.CVE-2018-14550alpinelibpng+73.54%7y ago10-07-2019 00:00An issue has been found in third-party PNM decoding associated with libpng 1.6.35. It is a stack-based buffer overflow in the function get_token in pnm2png.c in pnm2png.CVE-2018-14048alpinelibpng+63.34%8y ago13-07-2018 16:00An issue has been found in libpng 1.6.34. It is a SEGV in the function png_free_data in png.c, related to the recommended error handling for png_read_image.CVE-2013-6954libpnglibpng+34.69%12y ago12-01-2014 15:00The png_do_expand_palette function in libpng before 1.6.8 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via (1) a PLTE chunk of zero bytes or (2) a NULL palette, related to pngrtran.c and pngset.c.CVE-2025-28162debianlibpng1.6+20.16%8mo ago27-01-2026 00:00Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service via the pngimage with AddressSanitizer (ASan), the program leaks memory in various locations, eventually leading to high memory usage and causing the program to become unresponsive CVE-2025-28164debianlibpng1.6+20.16%8mo ago27-01-2026 00:00Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service via png_create_read_struct() function.

All vulnerabilities inlibpng

CVE-2007-5266: libpng Numeric Errors

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References