CVE-2007-5268
pngrtran.c in libpng before 1.0.29 and 1.2.x before 1.2.21 use (1) logical instead of bitwise...
pngrtran.c in libpng before 1.0.29 and 1.2.x before 1.2.21 use (1) logical instead of bitwise operations and (2) incorrect comparisons, which might allow remote attackers to cause a denial of service (crash) via a crafted PNG image.
Exploit likelihood
What each source reports
NVD Score used
pngrtran.c in libpng before 1.0.29 and 1.2.x before 1.2.21 use (1) logical instead of bitwise operations and (2) incorrect comparisons, which might allow remote attackers to cause a denial of service (crash) via a crafted PNG image.
- Record
CVE-2007-5268- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
pngrtran.c in libpng before 1.0.29 and 1.2.x before 1.2.21 use (1) logical instead of bitwise operations and (2) incorrect comparisons, which might allow remote attackers to cause a denial of service (crash) via a crafted PNG image.
- Record
CVE-2007-5268- Updated
- 2026-11-02
EUVDEUVD-2007-5248 No score
pngrtran.c in libpng before 1.0.29 and 1.2.x before 1.2.21 use (1) logical instead of bitwise operations and (2) incorrect comparisons, which might allow remote attackers to cause a denial of service (crash) via a crafted PNG image.
- Record
EUVD-2007-5248- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-mpjr-rfjg-826r No score
pngrtran.c in libpng before 1.0.29 and 1.2.x before 1.2.21 use (1) logical instead of bitwise...
pngrtran.c in libpng before 1.0.29 and 1.2.x before 1.2.21 use (1) logical instead of bitwise operations and (2) incorrect comparisons, which might allow remote attackers to cause a denial of service (crash) via a crafted PNG image.
- Record
GHSA-mpjr-rfjg-826r- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| aliases, references, title | GitHub Advisories | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-5268 is a medium vulnerability (CVSS 4.3) in Libpng, published October 8, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.09%, the 87th percentile. No source names a fixed version.
References
issues.rpath.com/browse/RPL-1814
mandriva.com/security/advisories?name=MDKSA-2007:217
secunia.com/advisories/35386
sunsolve.sun.com/search/document.do?assetkey=1-77-1020521.1-1
vupen.com/english/advisories/2009/1560
Show 34 moreShow less
bugs.gentoo.org/show_bug.cgi?id=195261
coresecurity.com?action=item&id=2148
sourceforge.net/mailarchive/forum.php?thread_name=3.0.6.32.20071004082318.012a7628%40mail.comcast.net&forum_name=png-mng-implement
us-cert.gov/cas/techalerts/TA08-150A.html
securityfocus.com/bid/25956
lists.apple.com/archives/security-announce/2008/Mar/msg00001.html
ubuntu.com/usn/usn-538-1
android-developers.blogspot.com/2008/03/android-sdk-update-m5-rc15-released.html
gentoo.org/security/en/glsa/glsa-200805-07.xml
docs.info.apple.com/article.html?artnum=307562
slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.520323
support.avaya.com/elmodocs2/security/ASA-2009-208.htm
nvd.nist.gov/vuln/detail/CVE-2007-5268
github.com/advisories/GHSA-mpjr-rfjg-826r