Debian/libpng1.6: medium 5.3

png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.

Action: Upgrade libpng1.6 to 1.6.36-4 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2019-7317#Debian:14/libpng1.6
• https://security-tracker.debian.org/tracker/CVE-2019-7317

published 2019-02-04T08:29:00.447Z · modified 2026-09-21T07:03:23.870197805Z · JSON