{"id":"CVE-2018-14048","details":"An issue has been found in libpng 1.6.34. It is a SEGV in the function png_free_data in png.c, related to the recommended error handling for png_read_image.","modified":"2026-08-07T11:31:05.133049952Z","published":"2018-07-13T16:29:00.377Z","related":["openSUSE-SU-2024:10972-1"],"database_specific":{"unresolved_ranges":[{"cpes":["cpe:2.3:a:oracle:jdk:1.6.0:update201:*:*:*:*:*:*","cpe:2.3:a:oracle:jdk:1.7.0:update191:*:*:*:*:*:*","cpe:2.3:a:oracle:jdk:1.8.0:update181:*:*:*:*:*:*","cpe:2.3:a:oracle:jdk:11.0.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"1.6.0-update201"},{"last_affected":"1.6.0-update201"},{"introduced":"1.7.0-update191"},{"last_affected":"1.7.0-update191"},{"introduced":"1.8.0-update181"},{"last_affected":"1.8.0-update181"},{"introduced":"11.0.0"},{"last_affected":"11.0.0"}],"source":"CPE_STRING","vendor_product":"oracle:jdk"},{"cpes":["cpe:2.3:a:oracle:jre:1.6.0:update201:*:*:*:*:*:*","cpe:2.3:a:oracle:jre:1.7.0:update191:*:*:*:*:*:*","cpe:2.3:a:oracle:jre:1.8.0:update181:*:*:*:*:*:*","cpe:2.3:a:oracle:jre:11.0.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"1.6.0-update201"},{"last_affected":"1.6.0-update201"},{"introduced":"1.7.0-update191"},{"last_affected":"1.7.0-update191"},{"introduced":"1.8.0-update181"},{"last_affected":"1.8.0-update181"},{"introduced":"11.0.0"},{"last_affected":"11.0.0"}],"source":"CPE_STRING","vendor_product":"oracle:jre"}]},"references":[{"type":"ADVISORY","url":"http://packetstormsecurity.com/files/152561/Slackware-Security-Advisory-libpng-Updates.html"},{"type":"ADVISORY","url":"https://seclists.org/bugtraq/2019/Apr/30"},{"type":"ADVISORY","url":"https://security.gentoo.org/glsa/201908-02"},{"type":"FIX","url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"},{"type":"EVIDENCE","url":"https://github.com/fouzhe/security/tree/master/libpng"},{"type":"EVIDENCE","url":"https://github.com/glennrp/libpng/issues/238"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/pnggroup/libpng","events":[{"introduced":"b78804f9a2568b270ebd30eca954ef7447ba92f7"},{"last_affected":"b78804f9a2568b270ebd30eca954ef7447ba92f7"}],"database_specific":{"cpe":"cpe:2.3:a:libpng:libpng:1.6.34:*:*:*:*:*:*:*","extracted_events":[{"introduced":"1.6.34"},{"last_affected":"1.6.34"}],"source":"CPE_STRING"}}],"versions":["1.6.34","v1.6.34"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-14048.json"}}],"schema_version":"1.8.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"}]}