Sploitus

41 exploited vulnerabilities in Libpng

Vulnerabilities with publicly known exploits

Vendors
Alt Linux, Astra Linux, Libpng, Red Hat, Suse, Vmware
With known exploits
41
Affected Libpng versions
= 1.6.35, 1.2.44, 1.4.3, 1.6.55, 1.6.54, 1.0.64, 1.2.54, 1.4.17, 1.5.24, 1.6.19, 1.0.55, 1.2.45, 1.4.8, 1.5.4, 1.6.56, 1.6.52, 1.0.53, 1.2.43, 1.4.1, 1.0.43, 1.2.35, 1.6.51, 1.6.36, 1.6.34, 1.6.8, 1.6.0, 1.6.1, 1.6.2, 1.6.3, 1.6.4, 1.6.5, 1.6.6, 1.6.7, 1.6.46, 1.6.37, 1.6.57, 0.89c, 0.95, 1.0.0, 1.0.1, 1.0.2, 1.0.7, 1.0.8, 1.0.9, 1.0.10, 1.0.11, 1.0.12, 1.0.13, 1.0.14, 1.0.15, 1.0.16, 1.0.17, 1.0.18, 1.0.19, 1.0.20, 1.0.21, 1.0.22, 1.0.23, 1.2.0, 1.2.1, 1.2.2, 1.2.3, 1.2.10, 1.2.11, 1.2.13, 1.2.14, 1.2.15, 1.2.16, 1.2.17, 1.2.18, 1.2.19, 1.2.20, 1.2.21, 1.2.22, 1.2.23, 1.2.32, 1.4.0
Affected Greg Roelofs Libpng versions
≤ 1.2.5
Affected Microsoft Msn Messenger versions
= 6.1, 6.2
Affected Microsoft Windows Media Player versions
= 9
Affected Microsoft Windows Messenger versions
= 5.0
Affected Canonical Ubuntu Linux versions
= 12.04, 14.04, 15.04, 15.10
Affected Debian Debian Linux versions
= 7.0, 8.0
Affected Oracle Solaris versions
= 11.2

Vulnerabilities with exploits

Highest CVSS first — 12 of these already have exploit code on Sploitus

CVE-2018-14550
CVSS 8.8 HIGH 2018-07-11FIX AVAILABLE
CVE-2010-1205 8 exploits
CVSS 9.8 CRITICAL 2010-06-30FIX AVAILABLE
CVE-2004-0599
CVSS 5.0 MEDIUM 2004-08-05FIX AVAILABLE
CVE-2004-0598
CVSS 5.0 MEDIUM 2004-08-05FIX AVAILABLE
CVE-2004-0597 3 exploits
CVSS 10.0 HIGH 2004-08-05FIX AVAILABLE
CVE-2026-25646
CVSS 8.3 HIGH 2026-01-01FIX AVAILABLE
CVE-2026-22801
CVSS 7.8 HIGH 2026-01-12FIX AVAILABLE
CVE-2026-22695
CVSS 7.1 HIGH 2025-11-19FIX AVAILABLE
CVE-2015-7981
CVSS 5.0 MEDIUM 2015-10-26FIX AVAILABLE
CVE-2015-8126
CVSS 7.5 HIGH 2015-11-12FIX AVAILABLE
CVE-2011-2691
CVSS 6.5 MEDIUM 2011-07-17FIX AVAILABLE
CVE-2011-2501
CVSS 6.5 MEDIUM 2011-07-17FIX AVAILABLE
CVE-2011-2692
CVSS 8.8 HIGH 2011-07-17FIX AVAILABLE
CVE-2026-33636
CVSS 7.6 HIGH 2026-01-01FIX AVAILABLE
CVE-2015-0973 1 exploit
CVSS 8.8 HIGH 2014-12-24FIX AVAILABLE
CVE-2025-66293 1 exploit
CVSS 7.1 HIGH 2025-12-03FIX AVAILABLE
CVE-2019-14373
CVSS 7.8 HIGH 2019-07-28
CVE-2019-17371
CVSS 6.5 MEDIUM 2019-10-09
CVE-2010-0205
CVSS 4.3 MEDIUM 2010-03-03FIX AVAILABLE
CVE-2009-0040 2 exploits
CVSS 6.8 MEDIUM 2009-02-22FIX AVAILABLE
CVE-2026-33416
CVSS 7.5 HIGH 2026-01-01FIX AVAILABLE
CVE-2025-64720 4 exploits
CVSS 7.1 HIGH 2025-05-26FIX AVAILABLE
CVE-2011-3026 1 exploit
CVSS 6.8 MEDIUMFIX AVAILABLE
CVE-2025-65018 5 exploits
CVSS 7.1 HIGH 2025-11-22FIX AVAILABLE
CVE-2019-3572
CVSS 6.5 MEDIUM 2019-01-02FIX AVAILABLE
CVE-2019-6129
CVSS 6.5 MEDIUM 2019-01-11
CVE-2018-14048
CVSS 6.5 MEDIUM 2018-07-13
CVE-2018-13785
CVSS 6.5 MEDIUM 2018-07-09
CVE-2013-6954
CVSS 6.5 MEDIUM 2014-01-12FIX AVAILABLE
CVE-2025-64506 2 exploits
CVSS 6.1 MEDIUM 2025-05-26FIX AVAILABLE
CVE-2025-64505 2 exploits
CVSS 6.1 MEDIUM 2025-05-26FIX AVAILABLE
CVE-2025-28162
CVSS 5.5 MEDIUM 2025-01-01FIX AVAILABLE
CVE-2025-28164
CVSS 5.5 MEDIUM 2025-01-01FIX AVAILABLE
CVE-2021-4214
CVSS 5.5 MEDIUM 2022-08-24
CVE-2026-3713
CVSS 5.3 MEDIUM 2026-03-08
CVE-2019-7317 2 exploits
CVSS 5.3 MEDIUM 2019-01-25FIX AVAILABLE
CVE-2026-34757
CVSS 5.1 MEDIUM 2026-04-09FIX AVAILABLE
CVE-2007-2756 1 exploit
CVSS 4.3 MEDIUM 2007-05-18FIX AVAILABLE
CVE-2009-2042
CVSS 4.3 MEDIUM 2009-06-12FIX AVAILABLE
CVE-2008-3964
CVSS 4.3 MEDIUM 2008-09-10FIX AVAILABLE
CVE-2011-3328
CVSS 2.6 LOW 2012-01-17FIX AVAILABLE