CVE-2007-5267: libpng Numeric Errors

EPSS trend

Probability

1.97%

Chance of exploitation in the next 30 days

Percentile

80%

Versus all other CVEs

30-day change

0.00 pp

From 1.97% on 21-09-2026

21-09-202621-10-2026

EPSS score

1.97%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

24 links

www.vupen.com/english/advisories/2007/3391VDB EntryX Refsource VUPEN
issues.rpath.com/browse/RPL-1814X Refsource CONFIRM
secunia.com/advisories/35386Third Party AdvisoryX Refsource SECUNIA
sunsolve.sun.com/search/document.do?assetkey=1-77-1020521.1-1Vendor AdvisoryX Refsource SUNALERT
sourceforge.net/mailarchive/message.php?msg_name=3.0.6.32.20071005143158.012ada08%40mail.comcast.netMailing ListX Refsource MLISTPatch
www.vupen.com/english/advisories/2009/1560VDB EntryX Refsource VUPEN
www.vupen.com/english/advisories/2009/1462VDB EntryX Refsource VUPEN
sourceforge.net/mailarchive/…Mailing ListX Refsource MLIST
secunia.com/advisories/27746Third Party AdvisoryX Refsource SECUNIA
www.coresecurity.com?action=item&id=2148X Refsource MISC

Show all 24 references

sunsolve.sun.com/search/document.do?assetkey=1-66-259989-1Vendor AdvisoryX Refsource SUNALERT
secunia.com/advisories/35302Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2008/0924/referencesVDB EntryX Refsource VUPEN
secunia.com/advisories/27130Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/29420Third Party AdvisoryX Refsource SECUNIA
lists.apple.com/archives/security-announce/2008/Mar/msg00001.htmlVendor AdvisoryX Refsource APPLE
secunia.com/advisories/27284Third Party AdvisoryX Refsource SECUNIA
android-developers.blogspot.com/2008/03/android-sdk-update-m5-rc15-released.htmlX Refsource CONFIRM
docs.info.apple.com/article.html?artnum=307562X Refsource CONFIRM
slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.520323Vendor AdvisoryX Refsource SLACKWARE
www.securityfocus.com/archive/1/483582/100/0/threadedMailing ListX Refsource BUGTRAQ
support.avaya.com/elmodocs2/security/ASA-2009-208.htmX Refsource CONFIRM
www.securityfocus.com/bid/25957VDB EntryX Refsource BID
www.securityfocus.com/archive/1/489135/100/0/threadedMailing ListX Refsource BUGTRAQ

Related vulnerabilities

CVE-2018-13785canonicalubuntu_linux+104.41%8y ago09-07-2018 13:00In libpng 1.6.34, a wrong calculation of row_factor in the png_check_chunk_length function (pngrutil.c) may trigger an integer overflow and resultant divide-by-zero while processing a crafted PNG file, leading to a denial of service.CVE-2018-14550alpinelibpng+73.54%7y ago10-07-2019 00:00An issue has been found in third-party PNM decoding associated with libpng 1.6.35. It is a stack-based buffer overflow in the function get_token in pnm2png.c in pnm2png.CVE-2018-14048alpinelibpng+63.34%8y ago13-07-2018 16:00An issue has been found in libpng 1.6.34. It is a SEGV in the function png_free_data in png.c, related to the recommended error handling for png_read_image.CVE-2013-6954libpnglibpng+34.69%12y ago12-01-2014 15:00The png_do_expand_palette function in libpng before 1.6.8 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via (1) a PLTE chunk of zero bytes or (2) a NULL palette, related to pngrtran.c and pngset.c.CVE-2025-28162debianlibpng1.6+20.16%8mo ago27-01-2026 00:00Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service via the pngimage with AddressSanitizer (ASan), the program leaks memory in various locations, eventually leading to high memory usage and causing the program to become unresponsive CVE-2025-28164debianlibpng1.6+20.16%8mo ago27-01-2026 00:00Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service via png_create_read_struct() function.

All vulnerabilities inlibpng

CVE-2007-5267: libpng Numeric Errors

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References