CVE-2011-3026: apple iphone_os Integer Overflow or Wraparound
Vulnerability summary
CVE-2011-3026 is a medium (CVSS 6.8) Integer Overflow or Wraparound vulnerability in apple iphone_os. EPSS estimates a 72.85% chance of exploitation in the next 30 days, higher than 99.4% of scored vulnerabilities. 1 public exploit is recorded.
Not severe (CVSS 6.8, network access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 5 · Related 5Timeline
- 16-02-2012PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
Integer overflow in libpng, as used in Google Chrome before 17.0.963.56, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger an integer truncation.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
72.85%
Chance of exploitation in the next 30 days
Percentile
99%
Versus all other CVEs
30-day change
Decrease -0.19 pp
From 73.04% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
1 foundExploit Reference (code.google.com)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Known conditions: network-reachable, no authentication (CVSS vector). Other conditions: not stated in public data.
Redhat21 products
- firefox< 0:3.6.26-3.el4
- firefox-debuginfo< 0:3.6.26-3.el4
- libpng< 2:1.2.7-9.el4 | < 2:1.2.10-15.el5_7 | < 2:1.2.46-2.el6_2
- libpng-debuginfo< 2:1.2.7-9.el4 | < 2:1.2.10-15.el5_7 | < 2:1.2.46-2.el6_2
- libpng-devel< 2:1.2.7-9.el4 | < 2:1.2.10-15.el5_7 | < 2:1.2.46-2.el6_2
Apple3 products
- iphone_os< 6.0
- mac_os_x≥ 10.7.0, < 10.7.5 | 10.6.8
- mac_os_x_server≥ 10.7.0, < 10.7.5 | 10.6.8
Suse2 products
Debian1 product
- libpng< 1.2.44-1+squeeze2
Google1 product
- chrome< 17.0.963.56
Opensuse1 product
- opensuseEOL11.4
6 vendors · 29 products
References
30 links- lists.apple.com/archives/security-announce/2012/Sep/msg00003.htmlVendor AdvisoryX Refsource APPLEMailing ListThird Party Advisory
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15032VDB EntrySignatureX Refsource OVALThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2012-02/msg00023.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.apple.com/archives/security-announce/2012/Sep/msg00004.htmlVendor AdvisoryX Refsource APPLEMailing ListThird Party Advisory
Show all 30 references
- googlechromereleases.blogspot.com/2012/02/chrome-stable-update.htmlX Refsource CONFIRMRelease NotesVendor Advisory
- lists.opensuse.org/opensuse-security-announce/2012-02/msg00020.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
