UpHeron
All vulnerabilities

Servers and applications

CVE-2018-13785

In libpng 1.6.34, a wrong calculation of row_factor in the png_check_chunk_length function (pngrutil.c) may trigger an integer overflow and resultant divide-by-zero while processing a crafted PNG file, leading to a denial of service.

Severity
Medium 6.5
Published
9 Jul 2018
Last changed
17 Jun 2026
Added to UpHeron
22 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
JavaServers and applications · cpe:a:oracle:jdk
  • Version 1.6.0-update201
  • Version 1.7.0-update191
  • Version 1.8.0-update181
  • Version 11.0.0
JavaServers and applications · cpe:a:oracle:jre
  • Version 1.6.0-update201
  • Version 1.7.0-update191
  • Version 1.8.0-update181
  • Version 11.0.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2018-13785
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2018-13785