CVE-2018-13785: Integer Overflow
In libpng 1.6.34, a wrong calculation of rowfactor in the pngcheckchunklength function (pngrutil.c) may trigger an integer overflow and resultant divide-by-zero while processing a crafted PNG file, leading to a denial of service.
Other sources
libpng through version 1.6.34 is vulnerable to an integer overflow and resultant divide-by-zero in the pngrutil.c:pngcheckchunklength() function. An attacker could exploit this to cause a denial of service via crafted PNG file.
Upstream Bug:
https://sourceforge.net/p/libpng/bugs/278/
Upstream Patch:
https://github.com/glennrp/libpng/commit/8a05766cb74af05c04c53e6c9d60c13fc4d59bf2
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2018-13785?
CVE-2018-13785 is a vulnerability in libpng 1.6.34 that may trigger an integer overflow and resultant divide-by-zero while processing a crafted PNG file, leading to a denial of service.
What is the severity of CVE-2018-13785?
The severity of CVE-2018-13785 is medium with a CVSS score of 6.5.
How does CVE-2018-13785 affect libpng?
CVE-2018-13785 affects libpng version 1.6.34.
How can I fix CVE-2018-13785?
To fix CVE-2018-13785, update libpng to version 1.6.36-6, 1.6.37-3, 1.6.39-2, or 1.6.40-2.
Where can I find more information about CVE-2018-13785?
You can find more information about CVE-2018-13785 at the following references: [Reference 1](https://sourceforge.net/p/libpng/bugs/278/), [Reference 2](https://github.com/glennrp/libpng/commit/8a05766cb74af05c04c53e6c9d60c13fc4d59bf2), [Reference 3](https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1599944).