ALPINE-CVE-2019-7317

See a problem?
Please try reporting it to the source first.
Source
https://security.alpinelinux.org/vuln/CVE-2019-7317
Import Source
https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2019-7317.json
JSON Data
https://api.osv.dev/v1/vulns/ALPINE-CVE-2019-7317
Upstream
Published
2019-02-04T08:29:00Z
Modified
2026-09-10T06:17:54Z
Severity
  • 5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.

References

Affected packages

Alpine:v3.10
libpng

Package

Name
libpng
Purl
pkg:apk/alpine/libpng?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
1.6.0
Fixed
1.6.37-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2019-7317.json"
Alpine:v3.11
libpng

Package

Name
libpng
Purl
pkg:apk/alpine/libpng?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
1.6.0
Fixed
1.6.37-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2019-7317.json"
Alpine:v3.12
libpng

Package

Name
libpng
Purl
pkg:apk/alpine/libpng?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
1.6.0
Fixed
1.6.37-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2019-7317.json"
Alpine:v3.13
libpng

Package

Name
libpng
Purl
pkg:apk/alpine/libpng?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
1.6.0
Fixed
1.6.37-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2019-7317.json"
Alpine:v3.14
libpng

Package

Name
libpng
Purl
pkg:apk/alpine/libpng?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
1.6.0
Fixed
1.6.37-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2019-7317.json"
Alpine:v3.15
libpng

Package

Name
libpng
Purl
pkg:apk/alpine/libpng?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
1.6.0
Fixed
1.6.37-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2019-7317.json"
Alpine:v3.16
libpng

Package

Name
libpng
Purl
pkg:apk/alpine/libpng?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
1.6.0
Fixed
1.6.37-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2019-7317.json"
Alpine:v3.17
libpng

Package

Name
libpng
Purl
pkg:apk/alpine/libpng?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
1.6.0
Fixed
1.6.37-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2019-7317.json"
Alpine:v3.18
libpng

Package

Name
libpng
Purl
pkg:apk/alpine/libpng?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
1.6.0
Fixed
1.6.37-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2019-7317.json"
Alpine:v3.19
libpng

Package

Name
libpng
Purl
pkg:apk/alpine/libpng?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
1.6.0
Fixed
1.6.37-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2019-7317.json"
Alpine:v3.20
libpng

Package

Name
libpng
Purl
pkg:apk/alpine/libpng?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
1.6.0
Fixed
1.6.37-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2019-7317.json"
Alpine:v3.21
libpng

Package

Name
libpng
Purl
pkg:apk/alpine/libpng?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
1.6.0
Fixed
1.6.37-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2019-7317.json"
Alpine:v3.22
libpng

Package

Name
libpng
Purl
pkg:apk/alpine/libpng?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
1.6.0
Fixed
1.6.37-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2019-7317.json"
Alpine:v3.23
libpng

Package

Name
libpng
Purl
pkg:apk/alpine/libpng?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
1.6.0
Fixed
1.6.37-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2019-7317.json"
Alpine:v3.24
libpng

Package

Name
libpng
Purl
pkg:apk/alpine/libpng?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
1.6.0
Fixed
1.6.37-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2019-7317.json"
Alpine:v3.6
libpng

Package

Name
libpng
Purl
pkg:apk/alpine/libpng?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
1.6.0
Fixed
1.6.37-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2019-7317.json"
Alpine:v3.7
libpng

Package

Name
libpng
Purl
pkg:apk/alpine/libpng?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
1.6.0
Fixed
1.6.37-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2019-7317.json"
Alpine:v3.8
libpng

Package

Name
libpng
Purl
pkg:apk/alpine/libpng?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
1.6.0
Fixed
1.6.37-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2019-7317.json"
Alpine:v3.9
libpng

Package

Name
libpng
Purl
pkg:apk/alpine/libpng?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
1.6.0
Fixed
1.6.37-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2019-7317.json"