pngimagefree in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because pngimagefreefunction is called under pngsafe_execute.
{
"versions": [
{
"introduced": "0"
},
{
"last_affected": "8.0"
},
{
"introduced": "0"
},
{
"last_affected": "9.0"
},
{
"introduced": "0"
},
{
"fixed": "8.0.23"
},
{
"introduced": "0"
},
{
"fixed": "9.6"
},
{
"introduced": "0"
},
{
"fixed": "9.6"
},
{
"introduced": "0"
},
{
"last_affected": "9.6"
},
{
"introduced": "0"
},
{
"last_affected": "9.6"
},
{
"introduced": "0"
},
{
"fixed": "7.3.9"
},
{
"introduced": "0"
},
{
"last_affected": "8.0"
},
{
"introduced": "0"
},
{
"last_affected": "8.0"
},
{
"introduced": "0"
},
{
"last_affected": "8.0"
}
]
}[
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "16.04"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "16.04"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "18.04"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "18.10"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "19.04"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "11.2.6.0"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7u221"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8u212"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "11.0.3"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "12.0.1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"fixed": "8.7.0-00"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"fixed": "8.7.0-00"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "15.0"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "15.1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "42.3"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"fixed": "11.53"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3.2"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"fixed": "4.0"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3.4.2"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3.4.2"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "3.4.2-p1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "3.4.2-p1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "5.8"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "6.0"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "6.0"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "6.0"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "6.0"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "6.0"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "6.0"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0"
}
]
}
]
[
{
"signature_type": "Line",
"deprecated": false,
"id": "CVE-2019-7317-777a6825",
"target": {
"file": "png.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"4483812120425865394765832017743841760",
"295930966388919334935205960237712292835",
"117419540564145513858588339867436813964",
"150157320390828655074241172061404527079",
"15219066793749250240221192274865703159",
"256432711195399036927642262353737110687"
]
},
"signature_version": "v1",
"source": "https://github.com/pnggroup/libpng/commit/a40189cf881e9f0db80511c382292a5604c3c3d1"
},
{
"signature_type": "Function",
"deprecated": false,
"id": "CVE-2019-7317-83d81dde",
"target": {
"file": "png.c",
"function": "png_get_copyright"
},
"digest": {
"length": 481.0,
"function_hash": "182119414766575611561000861233124297530"
},
"signature_version": "v1",
"source": "https://github.com/pnggroup/libpng/commit/a40189cf881e9f0db80511c382292a5604c3c3d1"
},
{
"signature_type": "Line",
"deprecated": false,
"id": "CVE-2019-7317-9bb3b070",
"target": {
"file": "pngtest.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"241838778844194275048866028647484350554"
]
},
"signature_version": "v1",
"source": "https://github.com/pnggroup/libpng/commit/a40189cf881e9f0db80511c382292a5604c3c3d1"
},
{
"signature_type": "Line",
"deprecated": false,
"id": "CVE-2019-7317-d09d8970",
"target": {
"file": "png.h"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"166375070723291529406421301066248769034",
"275647010778297936193963675511576832388",
"256826767335212246520616614652191899280",
"279336807821086835335477021495116274772",
"99841383750098798180616484435499546727",
"159302944862349488787630211743777147289",
"331742628729745467196492355602919503505",
"120425966103587571923372910432028590987"
]
},
"signature_version": "v1",
"source": "https://github.com/pnggroup/libpng/commit/a40189cf881e9f0db80511c382292a5604c3c3d1"
}
]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-7317.json"